Files
caddy-proxy-manager/app/(dashboard)/settings/page.tsx
fuomag9 0dad675c6d feat: integrate Coraza WAF with full UI and event logging
- Add coraza-caddy/v2 to Caddy Docker build
- Add waf_events + waf_log_parse_state DB tables (migration 0010)
- Add WafSettings type and get/save functions to settings
- Add WafHostConfig/WafMode types to proxy-hosts model
- Add resolveEffectiveWaf + buildWafHandler to caddy config generation
- Create waf-log-parser.ts: parse Coraza JSON audit log → waf_events
- Add WafFields.tsx per-host WAF UI (accordion, mode, CRS, directives)
- Add global WAF settings card to SettingsClient
- Add WAF Events dashboard page with search, pagination, severity chips
- Add WAF Events nav link to sidebar

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-03 22:16:34 +01:00

85 lines
3.2 KiB
TypeScript

import SettingsClient from "./SettingsClient";
import { getCloudflareSettings, getGeneralSettings, getAuthentikSettings, getMetricsSettings, getLoggingSettings, getDnsSettings, getSetting, getUpstreamDnsResolutionSettings, getGeoBlockSettings, getWafSettings } from "@/src/lib/settings";
import { getInstanceMode, getSlaveLastSync, getSlaveMasterToken, isInstanceModeFromEnv, isSyncTokenFromEnv, getEnvSlaveInstances } from "@/src/lib/instance-sync";
import { listInstances } from "@/src/lib/models/instances";
import { requireAdmin } from "@/src/lib/auth";
export default async function SettingsPage() {
await requireAdmin();
// Check if configuration is from environment variables
const modeFromEnv = isInstanceModeFromEnv();
const tokenFromEnv = isSyncTokenFromEnv();
const [general, cloudflare, authentik, metrics, logging, dns, upstreamDnsResolution, instanceMode, globalGeoBlock, globalWaf] = await Promise.all([
getGeneralSettings(),
getCloudflareSettings(),
getAuthentikSettings(),
getMetricsSettings(),
getLoggingSettings(),
getDnsSettings(),
getUpstreamDnsResolutionSettings(),
getInstanceMode(),
getGeoBlockSettings(),
getWafSettings()
]);
const [overrideGeneral, overrideCloudflare, overrideAuthentik, overrideMetrics, overrideLogging, overrideDns, overrideUpstreamDnsResolution] =
instanceMode === "slave"
? await Promise.all([
getSetting("general"),
getSetting("cloudflare"),
getSetting("authentik"),
getSetting("metrics"),
getSetting("logging"),
getSetting("dns"),
getSetting("upstream_dns_resolution")
])
: [null, null, null, null, null, null, null];
const [slaveToken, slaveLastSync] = instanceMode === "slave"
? await Promise.all([getSlaveMasterToken(), getSlaveLastSync()])
: [null, null];
const instances = instanceMode === "master" ? await listInstances() : [];
const envInstances = instanceMode === "master" ? getEnvSlaveInstances() : [];
return (
<SettingsClient
general={general}
cloudflare={{
hasToken: Boolean(cloudflare?.apiToken),
zoneId: cloudflare?.zoneId,
accountId: cloudflare?.accountId
}}
authentik={authentik}
metrics={metrics}
logging={logging}
dns={dns}
upstreamDnsResolution={upstreamDnsResolution}
globalGeoBlock={globalGeoBlock}
globalWaf={globalWaf}
instanceSync={{
mode: instanceMode,
modeFromEnv,
tokenFromEnv,
overrides: {
general: overrideGeneral !== null,
cloudflare: overrideCloudflare !== null,
authentik: overrideAuthentik !== null,
metrics: overrideMetrics !== null,
logging: overrideLogging !== null,
dns: overrideDns !== null,
upstreamDnsResolution: overrideUpstreamDnsResolution !== null
},
slave: instanceMode === "slave" ? {
hasToken: Boolean(slaveToken),
lastSyncAt: slaveLastSync?.at ?? null,
lastSyncError: slaveLastSync?.error ?? null
} : null,
master: instanceMode === "master" ? { instances, envInstances } : null
}}
/>
);
}