fuomag9
|
0dad675c6d
|
feat: integrate Coraza WAF with full UI and event logging
- Add coraza-caddy/v2 to Caddy Docker build
- Add waf_events + waf_log_parse_state DB tables (migration 0010)
- Add WafSettings type and get/save functions to settings
- Add WafHostConfig/WafMode types to proxy-hosts model
- Add resolveEffectiveWaf + buildWafHandler to caddy config generation
- Create waf-log-parser.ts: parse Coraza JSON audit log → waf_events
- Add WafFields.tsx per-host WAF UI (accordion, mode, CRS, directives)
- Add global WAF settings card to SettingsClient
- Add WAF Events dashboard page with search, pagination, severity chips
- Add WAF Events nav link to sidebar
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-03-03 22:16:34 +01:00 |
|
fuomag9
|
9254d8e910
|
fix: use node:http for Caddy admin API calls to avoid Sec-Fetch-Mode CORS triggering
|
2026-02-23 23:49:05 +01:00 |
|
fuomag9
|
4fac5e4d50
|
fix: remove --resume so Caddy always starts from Caddyfile with correct admin origins
|
2026-02-23 23:43:28 +01:00 |
|
fuomag9
|
1cfdaa061c
|
fix: allow web container to reach Caddy admin API by adding origins
|
2026-02-23 21:43:50 +01:00 |
|
fuomag9
|
35471ec98c
|
fix: use GOPROXY=direct in xcaddy build to bypass module proxy cache
|
2026-02-23 20:44:24 +01:00 |
|
fuomag9
|
e45507fcd7
|
feat: add caddy-blocker-plugin to Caddy Docker image
|
2026-02-23 19:56:36 +01:00 |
|
dependabot[bot]
|
9a6c192e25
|
docker: bump golang from 1.25 to 1.26 in /docker/caddy
Bumps golang from 1.25 to 1.26.
---
updated-dependencies:
- dependency-name: golang
dependency-version: '1.26'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-16 04:45:57 +00:00 |
|
fuomag9
|
a2512ffb8c
|
implemented rootless image and running
|
2025-12-28 20:19:46 +01:00 |
|
fuomag9
|
58ec7e321e
|
undo loki stuff
|
2025-11-12 23:22:30 +01:00 |
|
fuomag9
|
ec580d2385
|
Add the ability to log to loki
|
2025-11-12 22:07:51 +01:00 |
|
fuomag9
|
52f73e5ca7
|
1. First try to load from /config/caddy/autosave.json (the auto-saved config from the last run) 2. Fall back to /etc/caddy/Caddyfile only on first run when autosave doesn't exist
|
2025-11-11 21:39:19 +01:00 |
|
fuomag9
|
a95ecce935
|
Update Dockerfile
|
2025-11-11 19:39:15 +01:00 |
|
fuomag9
|
a5f6aed25d
|
Update Dockerfile
|
2025-11-11 19:21:49 +01:00 |
|
fuomag9
|
c10808cf3b
|
Update Dockerfile
|
2025-11-11 19:11:23 +01:00 |
|
fuomag9
|
76e31a3ea5
|
fix building
|
2025-11-11 19:05:43 +01:00 |
|
fuomag9
|
0ed2846133
|
switch caddy to ubuntu
|
2025-11-11 18:58:26 +01:00 |
|
fuomag9
|
f05b56bf02
|
Use HTTP for default site to prevent certificate errors on startup
|
2025-11-03 19:15:31 +01:00 |
|
fuomag9
|
315192fb54
|
first rewrite commit
|
2025-10-31 20:08:28 +01:00 |
|