Squashed 'src/deps/src/nginx/' changes from 37fe983554..da82f28

da82f28ead [REFACTOR] Update requirements files to include importlib-metadata and adjust setuptools version
db42fe045b Update CHANGELOG.md file
47c3652347 [FEATURE] Add plugin_list command to CLI for listing available plugins and their commands
9e13f15807 [REFACTOR] Remove LOG_LEVEL parameter from setup_logger calls in job scripts
65a611072b [REFACTOR] Rename utils.py to backup.py and update import statements across the project
9e4c35b1e1 [FEATURE] Rename MODSECURITY_CRS_PLUGIN_URLS to MODSECURITY_CRS_PLUGINS for consistency and update related data migration logic
e2b2b7a0fa Add urllib shenanigans back as it can create problems and update psycopg
4e15a76413 [DEPS] Update requirements files to include setuptools and pip with safety notes
cbf63d15fd [CONFIG] Update pre-commit configuration to include reports.js in codespell skip list
9c5aa2310a [DEPS] Update urllib3 to version 2.3.0 and adjust autogenerated comments for Python 3.10
c37b2fb626 [DEPS] Exclude test directories from Python requirements update script
4c6c4f9104 Remove everything related to zstd as we are working on it on another branch for now
e666be3108 [TESTS] Remove obsolete test files from zstd-nginx-module
fff09c5924 [DEPS] Update post_install script for zstd-nginx-module to remove test directory
ef062b50dd Merge commit '978165a4fd10558126803cd810a8d57d34580f00' as 'src/deps/src/zstd-nginx-module'
978165a4fd Squashed 'src/deps/src/zstd-nginx-module/' content from commit f4ba115e0b
4b09e1c8d2 [TESTS] Remove obsolete test scripts and related files from zstd CLI tests
73c49c41a8 Merge commit 'b06faf1e8a0d77d298679df8d98cb03324e4da8b' as 'src/deps/src/zstd'
b06faf1e8a Squashed 'src/deps/src/zstd/' content from commit 794ea1b0af
67ff7475aa [DEPS] Add zstd v1.5.6 and zstd-nginx-module v0.1.1 to dependencies
95df521ba6 Merge pull request #1906 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.208.0
635e22fca0 Merge pull request #1905 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.12.0
cf405bc77f Remove unnecessary post_install cleanup commands from deps.json
352267d644 Update post_install scripts in deps.json to remove unnecessary cleanup commands
d8b6d701b1 Revert "Remove unused test file for lua-gd"
623d68d13b Revert "Remove unused test files for lua-cjson"
d5dbd46dcf Remove unused example files and headers from zlib examples directory
b61ded6858 Revert "Remove unused test files and scripts from ModSecurity"
90359705c4 Revert "Remove unused example files from zlib examples directory"
60326f392a Revert "Remove unused test files for libmaxminddb"
cfa7f5a101 Remove unused example files from zlib examples directory
9aef1a879a Remove unused test files and certificates from stream-lua-nginx-module
9e07798513 Remove unused example files from ngx_devel_kit
51434861db Remove unused documentation files from Nginx integration
ba242318bd Remove unused test files and scripts from ModSecurity Nginx integration
3a7a25b568 Remove unused test files and scripts from ModSecurity
f2ac67a5e6 Remove unused documentation files for Mbed TLS
ddd8a7d4ef Remove unused test files for luasocket
a4e550bf16 Remove unused test files for lualogging
bddb5f54fe Remove unused test files for LuaJIT
e8bccff876 Remove unused test files for lua-resty-upload
c71a7d9321 Remove unused test files for lua-resty-string
e918e26c8a Remove unused test files for lua-resty-signal
1590573968 Remove unused test file for lua-resty-session
1b31e33a48 Remove unused test files for lua-resty-redis-connector
714105474b Remove unused test files and certificates from lua-resty-redis
d3a25aca34 Remove unused test files for lua-resty-mlcache
597aa7d2e3 Remove unused test files for lua-resty-lrucache
ab3013359d Remove unused test files and configurations for lua-resty-logger
c259780b4f Remove unused test files and libraries from lua-resty-ipmatcher
ff1adf0230 Remove unused test files and certificates from lua-resty-http
ef98a5ae5e Remove unused Lua JSON encoding and DNS test files
e03b67d044 Remove unused certificate generation and test files for mTLS
116a8b5b26 Remove unused test files and configurations for lua-nginx-module
4f5d1919c3 Remove unused test file for lua-gd
402afb17ae Enhance post-install scripts to handle patch failures for multiple dependencies
351ef0cc45 Remove unused test file for lua-ffi-zlib
3ba529359e deps/gha: bump ruby/setup-ruby from 1.207.0 to 1.208.0
7d31b2a8db deps/gha: bump docker/build-push-action from 6.11.0 to 6.12.0
0e4f948eb5 Remove unused test files for lua-cjson
b698363c34 Remove unused test files for Lua 5.1.5
c6c9f510ca Add post-install script execution to init_deps.sh
190225c701 Remove unused test files for libmaxminddb
7a7c93255e Remove unused test files for SQL injection and folding tests
76b9e3838d Remove unused test file for lbase64
157836eb37 Remove unused test files for headers-more-nginx-module
8d27236b1a Refactor init_deps.sh to simplify post-install script execution logic
2146e20608 Remove test, doc and example folders in deps
389efdd479 Update .dockerignore to exclude temporary virtual environment and test directories
87fdcb2ece Add order column to bw_selects and update migration scripts for version 1.6.0-rc2
51f6cf570d Add daily migration updates for Docker dependencies in dependabot configuration
92d8af4a5b Bump version to 1.6.0-rc2 and update related Dockerfiles and configurations
642de7313f Add order attribute to Selects model and update related database logic
52b07fe079 Update setup.html to indicate that the Admin Email field is optional
fde261abc1 Add blacklist configuration options to JSON templates
ccc25fb9f7 Add debug logging for CSRF error handling in main.py
788c2c56bc Fix indentation and formatting issues in bunkerweb-scheduler.sh and entrypoint.sh
159c9475f3 Add error logging for database connection failures in scheduler scripts
ee708e44f7 Refactor plugins-settings.js to improve handling of key-value pairs by allowing values to contain '=' characters
855ddaf9f3 Implement SERVER_NAME handling in raw mode for services_service_page
57080e4637 Enhance plugins_settings_raw.html to handle new endpoint and cloning scenarios for SERVER_NAME setting
4b5ef2341f Refactor services_service_page to streamline variable handling in raw mode
2db4905297 Update Dockerfile-debian to use consistent base image SHA256
c09c30fce8 Merge pull request #1898 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.28.1
ddc679f34b Merge pull request #1897 from bunkerity/dependabot/github_actions/dev/stefanzweifel/git-auto-commit-action-5.1.0
26b9dd7837 Update postinstall script to create environment variable files for bunkerweb
d5187ddab6 Update Strict-Transport-Security header value and documentation
69fe0f9e8a Fix paths in gunicorn configuration for bunkerweb UI startup script
fa48dda8e9 Enhance step data handling in Database class by adding ordering and restructuring data appending
9300d1b4d6 Update pre-commit configuration to upgrade StyLua and Gitleaks versions
9b193e996e [MODSEC] Update UI configuration to remove additional attack protocol rules
4d1da54880 Update advanced documentation
e8943e1da7 Improve help descriptions for Brotli and Gzip compression settings
18a8c4611c Add stream support in Kubernetes integration and enhance reverse proxy handling
c2bce9d010 Rename 'Security tuning' to 'Advanced' in navigation and clear default whitelist IP addresses in settings documentation
f5e183dc99 Fix log message to indicate successful download of good entries in greylist and whitelist scripts
6bfe852b44 Clear default whitelist IP addresses in plugin configuration as DuckDuckBot's ips change too often
d44a9b3d3a Update Cloudflare API token alias and change RFC2136 algorithm to HMAC-SHA512
1b28fcd633 Add deprecation notice for Swarm integration in documentation
426f1a0349 Update settings documentation
d61c10e8e0 [#1889] Introduce SSL plugin for managing HTTPS settings and fix https redirect bypass when a client was whitelisted
5749947b62 Update changelog for v1.6.0-rc2 and enhance certificate validation in customcert plugin
18535b9307 Merge commit '275874fbb014e0e3ab5a27c7d25c06b4112820b7' into dev
275874fbb0 Squashed 'src/deps/src/libmaxminddb/' changes from 0ff5a5bfb3..cba618d658
466c9c147d Update changelog for v1.6.0 and bump libmaxminddb to v1.12.2
3cbab8a660 Fix logic in SSL certificate validation to ensure proper handling of custom SSL options
b66e1f1403 deps/gha: bump github/codeql-action from 3.28.0 to 3.28.1
87c3e4c3c3 deps/gha: bump stefanzweifel/git-auto-commit-action from 5.0.1 to 5.1.0
970a30b65b Refactor limit connection configuration to improve clarity and correct default mappings
c97fd79e0e Refactor configuration handling to remove unused parameters and improve clarity in multiple settings processing
383af8f421 Enhance ModSecurity rules by adding additional rule removal for attack-rfi in UI configuration
c32f1c10a6 Add error handling for read-only database mode in instances action
3e584f3df9 Add custom SSL configuration options to template files
e613148a29 Refactor documentation deployment steps for clarity and improved functionality
f25ba38eec Refactor database path handling to use Path object for improved compatibility
9a967805ff Merge pull request #1885 from bunkerity/dependabot/github_actions/dev/actions/upload-artifact-4.6.0
8ffc7b702a Merge pull request #1884 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.11.0
9ab4da418c Remove CVE-2023-6129 from Trivy ignore list
8df30f01e5 Update PostgreSQL and MySQL images to latest versions in configuration files
ca4e45addd Update setuptools and sqlalchemy versions in requirements files
3fd3046144 Update Dockerfiles to use new image digests for Debian and Red Hat
eb7b9aac75 Remove PostgreSQL 17 warning from documentation regarding Docker integration
4a59ba51bb Refactor database version check and configuration update in scheduler scripts
43b905fee2 Update Dockerfiles to use new base images and remove CVE references
30a0efb7f9 Refactor database connection string validation to improve readability and add recommended drivers for MySQL/MariaDB and PostgreSQL
5599cc8013 Refactor bw_ui_users table migration to conditionally drop columns and set username as primary key
5b53c72078 deps/gha: bump actions/upload-artifact from 4.5.0 to 4.6.0
527fa9d9df deps/gha: bump docker/build-push-action from 6.10.0 to 6.11.0
27ac97828e Add retrieval of database metadata in download-pro-plugins.py
800f7a36b8 Refactor documentation deployment workflow to separate hidden and visible deployments
454adaf0cc Update push doc workflow to edit the version after deploying it
851b0ff806 Fix typo in GitHub Actions workflow for documentation deployment
e8461d189d Update logrotate configuration to include Let's Encrypt logs
54fd5f01df Update plugin versions to 1.8 in README and documentation
f8452b8f50 Squashed 'src/deps/src/libmaxminddb/' changes from 24df335085..0ff5a5bfb3
8767c0822f Merge commit 'f8452b8f503efa7ad2535a51bc3a449ccd01c4b8' into dev
416289fd09 Update libmaxminddb to version 1.12.1
9fb0475c3d ci/cd - push hidden doc for RC releases
95456ddff9 Enable automatic Let's Encrypt certificate generation in Authelia docker-compose configuration
cd39c99102 Fix path in setup-linux.sh to copy configs from the correct directory
77c6df70f6 Refactor test cleanup to use --remove-orphans flag in docker compose commands and streamline bw-data management
7d6a19321b Add ModSecurity rule to remove false positives for LFI attacks in Authelia configuration
455abccb92 Refactor JobScheduler to use schedule.Job type and optimize healthcheck job scheduling logic
6222c0ad4a Add redis-data volume to autoconf.yml for persistent storage in authelia example
67a04f8ba5 Remove obsolete Magento test configuration file
b6bde203cf Update dependencies in requirements files to latest versions
1f9393f8d0 Refactor dotenv variable loading to improve readability and error handling; enhance server name validation logic and optimize plugin loading with threading
b44492c685 Enhance health check and reload functionality with temporary file indicators and improved timeout handling
dfeefc5442 Merge pull request #1867 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.2.1
3316736424 Refactor JobScheduler to manage module paths more efficiently and prevent duplicate entries in sys.path
c214c503f8 deps/gha: bump softprops/action-gh-release from 2.2.0 to 2.2.1
675913ae8b [#1659] Refactor server configuration to support multiple HTTP and HTTPS ports with common options for improved flexibility
b59afa049b Enhance plugin module execution by validating absolute paths and ensuring module spec creation
054dd85af8 Enable AUTO_LETS_ENCRYPT in Redmine Docker Compose configuration for automatic SSL certificate generation
6fe460d8c2 Refactor environment variable handling in certbot jobs to use cmd_env for improved flexibility
4846000ad4 Refactor theme toggle implementation in JavaScript and HTML for improved clarity and functionality
10a19fc72c Update DockerTest to conditionally set USE_LETS_ENCRYPT_STAGING based on AUTO_LETS_ENCRYPT
7f136757d5 ci/cd - temp rename k8s cluster
854b78669f ci/cd - increase k8s cluster version
7a4f7abe6a Update dependencies: bump setuptools to 75.7.0, update boto3 and botocore to 1.35.93, and upgrade google-api-python-client to 2.157.0
5136b1c8fc Add 'order' column to template settings and custom configs for improved sorting
e3d5d5cd51 Add new settings ignored by configuration warnings: RELOAD_MIN_TIMEOUT, DISABLE_CONFIGURATION_TESTING, and OLDPWD
adc016b6d8 Monthly mmdb update
2554cf9e42 Update Dockerfile to use Python 3.13-alpine for improved performance and security
df2fdffeeb Update pytablewriter to version 1.2.1 and msgspec to version 0.19.0 in requirements files
f0021701c0 [#1421] Add support for multiple listening ports in server-stream configuration
e5bef59d91 Enhance instance status handling by adding 'failover' state and updating related logic in the database and UI templates
1dc8b6de31 [#1421] Add support for TCP toggle listening in server-stream configuration (now UDP doesn't replace TCP when activated)
5e5130c398 [#1467] Add multi-user support in Auth basic plugin with dynamic user-password handling and update AUTH_BASIC_LOCATION regex to be more open
5c21ecb9dc Add high availability configuration details for BunkerWeb installation
79b53ec15d Refactor conditional logic in postinstall.sh for improved clarity and consistency
4a94680615 Set ownership of Nginx configuration directory to nginx user and group
5a28861b71 Refactor RHEL distribution handling in LinuxTest to streamline package installation and reset PHP module
2451ed4048 Add custom SSL certificate data and priority configuration to setup
3514d5c3f8 Rename "Custom HTTPS certificate" to "Custom SSL certificate" and update related descriptions in plugin.json
11c6f2635d Add custom SSL certificate priority configuration and update related identifiers
0fd01af23c [#1762] Add configurable limit for SecRequestBodyNoFilesLimit in ModSecurity
5155a203f3 Update Redmine and database configurations to use PostgreSQL and version 6
de4366ac1c Update MariaDB image version to 11 in Passbolt configuration files
e410eaa255 Add RHEL and RHEL9 specific PHP installation steps in LinuxTest
327933617f Update Drupal version in setup script to 10.4.0
7c941009d7 Fix log truncation command in LinuxTest and update debug failure logging
925bf43fbb Set UI_WIZARD environment variable to 'no' in core test workflow
95c7a16afb Merge pull request #1844 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.207.0
e346f31807 Update workflows and Dockerfiles to support Fedora 40, removing references to Fedora 41
fa05364074 deps/gha: bump ruby/setup-ruby from 1.206.0 to 1.207.0
3e67dbdb8d Update OWASP Core Rule Set to version 4.10.0 and add CVE-2023-5003 to restricted files
04af5fd531 Update Moodle configuration to use MARIADB environment variables
d4caf6ac14 Fix path to Nginx executable in configuration check
3c827e2eed Remove unnecessary dependency compression steps from Dockerfiles and post-install script
15fb2f57a9 Add method to retrieve UI users with optional dictionary format
54bb80763b Add job path to Job initialization for better context in logging
2e5b84a566 Update test URLs in tests.json for Tomcat example
77b9957d8b Update Tomcat image version and modify TLS URL in tests.json
38600a0441 Update nginx and nginx-mod-stream dependencies to specific version for Fedora package
56f8d2a591 Add systemctl restart for bunkerweb in LinuxTest
611f4f64a7 Update regex for server name validation in settings.json
fc83138d98 Create dummy variables.env file for bunkerweb if it doesn't exist
f340999140 Enhance cleanup process in LinuxTest by adding log rotation and truncation for bunkerweb logs
75a8f39670 Update HAProxy configuration to replace 'mybunker' with 'bunkerweb'
141b6aac6a Add return value assignment in JobScheduler after executing plugin module
26d70c1a54 Update KubernetesTest to filter environment variable replacements for DaemonSet of bunkerweb
3645151330 Add CUSTOM_LOG_LEVEL environment variable to KubernetesTest for bunkerweb
6429a0ea70 Update KubernetesTest to replace environment variables for bunkerweb
a10e9cd7f8 Add additional volume mounts for bunkerweb with appropriate permissions
dbf398a01c Update Dockerfiles to create and set permissions for /data/www and /var/www/html directories
1d022fbe45 Enhance Job and JobScheduler classes with unique environment handling and improved initialization
c4cce2a1ac Update Docker images in configuration files to use 'php:fpm' instead of 'php:fpm-alpine3.19'
fa370f39b3 Refactor Docker and Swarm controllers to improve container and service retrieval with enhanced error handling and namespace filtering
de54a88693 Replace 'docker-compose' with 'docker compose' in test scripts for consistency with updated Docker CLI commands
db160b106a Merge pull request #1828 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.206.0
32660382b4 Fix file paths in letsencrypt.lua for certificate retrieval
e36755841d Refactor Job class initialization to include plugin_id and improve job path validation
310e044e28 deps/gha: bump ruby/setup-ruby from 1.205.0 to 1.206.0
c2c52f5f71 Update letsencrypt.lua to include LETS_ENCRYPT_CHALLENGE check for wildcard usage
342164da38 Refactor import statement in certbot-new.py to use letsencrypt module for improved clarity
eda8a10ce6 Refactor domain handling in certbot-new.py to streamline input processing and ensure consistent lowercasing of server names
4ca6bd53e8 Enhance domain handling in certbot-new.py to support both string and set inputs for domains
12c3275303 Remove redundant paths from sys.path management in bunkernet jobs
b27ed6f94d Improve dynamic module import in JobScheduler to manage sys.path more safely
08cba813c6 chmod +x all examples scripts
6d1a271a03 Import dump function from yaml in DockerTest.py
6fc4b52653 Refactor environment variable handling in AutoconfTest, DockerTest, and SwarmTest to use dictionary assignment and add CUSTOM_LOG_LEVEL
59f5b2e65d Update KubernetesTest to exclude IngressClass from environment variable replacement
65cacf5412 Update test configurations to use 'bw-scheduler' service and adjust environment variables
32f6db39af Merge pull request #1816 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.205.0
33d6247eb0 Update GitHub Actions workflow to ensure test script is executable before running
fb29640330 deps/gha: bump ruby/setup-ruby from 1.204.0 to 1.205.0
f074f9f709 Refactor GitHub Actions workflow by removing redundant test preparation jobs
4b2a853318 Refactor database configuration update and migration logic in scheduler scripts
8d2a95b696 Merge pull request #1811 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-37cdac4
b549a28965 Merge pull request #1810 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-38791b2
9f575d0e35 Merge pull request #1807 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-d3f4492
12b49adf23 Merge pull request #1806 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-5e1b956
f405963170 Merge pull request #1802 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.28.0
32b6df02fc Update Dockerfile to use Python 3.12 and ensure pip installation for dependencies
586beda91c Refactor JobScheduler to improve environment handling and plugin execution
d46605bf18 Refactor database URI handling and improve error messages in scheduler scripts
d4603b91f2 Fix template configuration retrieval and streamline plugin base definition in Database class
511e79aae8 Enhance plugin download functionality by adding file type detection and improving error handling for ZIP and TAR extraction
0924671330 Add IP address and User-Agent to session if missing
49084d6561 Refactor JobScheduler to improve environment handling by ensuring job modules receive a copy of the environment and updating the environment consistently across job execution.
b5079b7fac Implement retry logic for Kubernetes event streaming and enhance error handling in IngressController
2cbe2521f3 Add GitHub Actions workflow for automatic release candidate builds and deployments
d0be0fc2e0 Add core/letsencrypt/jobs to Python path in certbot-new.py
b26cee1917 Update dependencies: bump jinja2 to 3.1.5, click to 8.1.8, boto3 and botocore to 1.35.86, and add aiofiles to requirements
c68cd5ef23 Enhance job handling and cache permission management in JobScheduler
671719f97e Fix pro_expire date formatting check to ensure proper type validation
a0a9f0c03e deps/linux: bump redhat/ubi8 from `7287624` to `37cdac4` in /src/linux
562f0d2a76 deps/linux: bump redhat/ubi9 from `aa149a2` to `38791b2` in /src/linux
0445bab728 deps/tests/linux: bump redhat/ubi8-init in /tests/linux
7f8a7fe213 deps/tests/linux: bump redhat/ubi9-init in /tests/linux
19a557de14 deps/gha: bump github/codeql-action from 3.27.9 to 3.28.0
3ed414346f Merge pull request #1798 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-71551c0
29824fa003 Merge pull request #1795 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-aa149a2
41c4bed776 Merge pull request #1793 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-7287624
5c73350d09 Merge pull request #1786 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-c586b14
33dc1ad2a4 Merge branch 'dev' of https://github.com/bunkerity/bunkerweb into dev
1a974dbe57 feat: update base images in Dockerfiles to latest versions for improved stability
eafabf8819 Merge pull request #1791 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.9
510419ceff Merge pull request #1799 from bunkerity/dependabot/github_actions/dev/actions/upload-artifact-4.5.0
5e9db69214 Merge pull request #1797 from bunkerity/dependabot/github_actions/dev/docker/setup-buildx-action-3.8.0
99cb8d23ab Merge pull request #1796 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.204.0
b5556665ab Merge pull request #1789 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.2.0
6a1644fe97 chore: update changelog for v1.6.0-rc1 with bugfixes, features, and deprecations
28b33f3162 chore: update package versions in requirements files
bc93b61bf3 feat: update Dockerfile version label to 1.6.0-rc1
4bb616e1c4 feat: add Permissions-Policy header to enhance security controls
328caa229e feat: enhance Content Security Policy and add additional security headers
bf676b32dd feat: enhance random number generation for secure randomness in utils
ac81936f9d feat: remove X-XSS-Protection header and related configuration from plugin
1092ea0e00 feat: update Docker images to version 1.6.0-rc1 in example configurations
b3e273dd9a feat: update version to 1.6.0-rc1 across project files and Docker configurations
9bc64d515d Start work on easy migration from one version to another using alembic
1983b41fee deps/gha: bump actions/upload-artifact from 4.4.3 to 4.5.0
982213bbcf deps/tests/linux: bump redhat/ubi9-init in /tests/linux
699c5cc616 deps/gha: bump docker/setup-buildx-action from 3.7.1 to 3.8.0
f36ba4245a deps/gha: bump ruby/setup-ruby from 1.202.0 to 1.204.0
85d1090198 deps/linux: bump redhat/ubi9 from `1057dab` to `aa149a2` in /src/linux
07698c186e deps/linux: bump redhat/ubi8 from `79d46e7` to `7287624` in /src/linux
72d74ece41 deps/gha: bump github/codeql-action from 3.27.5 to 3.27.9
c151b844cb deps/gha: bump softprops/action-gh-release from 2.1.0 to 2.2.0
6175627fda deps/tests/linux: bump redhat/ubi8-init in /tests/linux
b97257c7c3 [#1766] feat: enhance IngressController to support configurable service protocol
756daea931 feat: add country tracking to ban management; update templates and scripts for country display
56432f62c4 fix: disable strict SSL for CSRF protection in the application configuration
cacab54225 feat: add health check endpoint and integrate it into the scheduler for instance status monitoring
12beb00e17 fix: improve entrypoint script to capture and log exit code of the main Gunicorn process
6e2f54e6a2 feat: enhance password validation regex to require special characters; update related templates and scripts
4e55b2f61c fix: update volume paths in dev Docker Compose files to use the utils directory
1df26cee65 chore: update dependencies for six, pydantic, boto3, botocore, and protobuf
f397200535 fix: ensure proper exit code handling in scheduler entrypoint script
f56524a35d feat: add temporary UI service with logging and session management; update dependencies and Dockerfile
10c9f29f13 feat: enhance URL validation and sanitization in loading page; improve file extraction safety in plugins
bad9c3cc5e refactor: move watch type handling inside the loop for improved clarity
a7f632dab0 feat: improve SSL handling and logging in IngressController
6be20b6189 feat: enhance logging by removing sensitive information and cleaning up debug messages
996299893b Monthly mmdb update
17ee5443ea feat: add reverse proxy URL handling in setup and update UI templates
a8b064cfd2 feat: remove deprecated Docker Compose example for killercoda
3e071c856f feat: update button color for selected rows in dark style table
d5bb9f913c feat: implement ALWAYS_REMEMBER functionality for session persistence in login
35d61bb898 feat: enable partitioned session cookies for enhanced security
7c71fe32f0 fix: update regex for cookie flags validation to allow additional attributes
114175a5d1 feat: update killercoda example Docker Compose
4aa87794fa feat: add CHECK_PRIVATE_IP environment variable to killercoda example's Docker Compose
12b88c4541 feat: add custom configuration to increase server names hash bucket size in Docker Compose
d3c04cca3a fix: increase string length for service_id and id columns in database models
880b5431c9 fix: update regex for server name validation to be more open
94307cb3ad feat: add CHECK_PRIVATE_IP configuration to manage session IP address changes for private networks
59d88bcccd fix: remove unnecessary logger initialization in ReverseProxied and enhance IP address validation in session checks
c2b21660c6 feat: add logging to ReverseProxied middleware for debugging
3d8bdd22b9 feat: add USE_REAL_IP and REAL_IP_FROM settings to Docker Compose example
f60895af73 feat: add killercoda Docker Compose example
a41c9c0380 feat: add reset button for template settings in plugins settings UI
efde5fa049 fix: format recovery code display in profile template
2fdbff85a9 fix: convert user creation and update dates to timezone-aware datetime
a661d16c38 fix: remove GENERATE_SELF_SIGNED_SSL setting from UI templates
e1f14bc8a1 feat: add SECURITY_MODE setting to security templates
a26a9138ca Merge pull request #1772 from bunkerity/dependabot/docker/tests/linux/dev/ubuntu-80dd3c3
3aa26256cd Merge branches 'dev' and 'dev' of https://github.com/bunkerity/bunkerweb into dev
013206ce88 fix: update Dockerfile to use a specific sha256 digest for redhat/ubi8-init image
03d1c5a96c Merge pull request #1770 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-79d46e7
ffc41a95cc deps/tests/linux: bump ubuntu in /tests/linux
54ede8177c Merge pull request #1769 from bunkerity/dependabot/docker/src/linux/dev/ubuntu-80dd3c3
c4a72ad7c5 Merge pull request #1765 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-1057dab
f5525d3b51 Merge pull request #1764 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-2624d48
de20b1b04a Merge pull request #1760 from aizatto/patch-2
acf5443920 fix: simplify draft settings logic in plugins settings initialization
b2165f09c8 fix: update template handling to change default from 'high' to 'low' and adjust related logic in database queries and UI
3af012b341 fix: adjust admin age check to use local timezone to avoid comparison of offset-naive and offset-aware datetimes
59c70b51e6 fix: change default template value from 'high' to 'low' in services page
b6ee15a66b fix: update regex for server name validation to escape hyphens
eca4fb3326 feat: add LIMIT_CONN_MAX_HTTP3 configuration to connection limits in JSON templates
baba613dec fix: update DNSBL_LIST to remove deprecated entries and improve formatting
db0ed2a512 deps/linux: bump redhat/ubi8 from `d497966` to `79d46e7` in /src/linux
b69841db23 deps/linux: bump ubuntu from `278628f` to `80dd3c3` in /src/linux
8685281248 chore: update dependencies to latest versions in requirements files
bff7ff6dc6 chore: update coreruleset to version 4.9.0 and enhance documentation
b7f3974fe8 fix: use serverSide processing for reports
818270384c feat: add configuration testing option for Nginx reload endpoint
53d6114fc1 fix: add deprecation warning for Swarm integration in SwarmController
19de0e1e9d fix: update mode checks in postinstall script for bunkerweb, scheduler, and UI
f7785536c9 fix: enhance service management logic for bunkerweb, scheduler, and UI with clearer status messages
d7bd9f835f deps/linux: bump redhat/ubi9 from `2bae906` to `1057dab` in /src/linux
7496cb0e47 deps/tests/linux: bump redhat/ubi9-init in /tests/linux
7619846e9c fix: add checks for active services before reloading or restarting bunkerweb and scheduler
9f5ed53b99 docs: update title for bunkerweb-plugins/webhook
3e5e269d33 fix: add 'tar' dependency to package configurations for various Linux distributions
723b894a08 fix: update log message for restarting bunkerweb-scheduler service in postinstall script
cfb9434cb1 fix: add logic to disable bunkerweb and related services during postinstall
b69cd8aeda fix: ensure ignored directories are correctly tracked during job cache restoration
a9792cb047 fix: improve bunkerweb service management in postinstall script
5236e3e329 feat: add BunkerWeb Scheduler service and update backup scripts for scheduler environment
d614dad821 fix: enhance ui.env creation with additional environment variables and permissions
6f1c597038 fix: refactor logging configuration to use constants for format and date format
0bfb9211cb fix: update file permissions for database and cache management
d7cef06095 fix: update UI Dockerfile version label to 1.6.0-beta
b5316a151f fix: handle ArgumentError in plugin command parsing and improve debug logging
b52476900d fix: update CHANGELOG for v1.5.12
02dc9aef49 fix: enhance web UI configuration with new environment variables for listening address, port, and worker settings
734b4cc492 fix: update ModSecurity rules in ui.conf to enhance security and logging
026e63b58f fix: add critical logging for invalid SERVER_NAME in Configurator
8128fb59b2 fix: update IngressController to improve service port handling
1c1bb12259 Merge pull request #1754 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.10.0
fd75cdefc0 deps/gha: bump docker/build-push-action from 6.9.0 to 6.10.0
8b55f9f303 fix: enhance changelog extraction in GitHub workflow to preserve formatting
9b896be394 fix: add installation of Python requirements in Dockerfile
d7ef17eb27 fix: add support for 'plugin' command in CLI
5b759e8fe6 Update db diagram
621523ea6a fix: enhance afterRemoveDEB.sh and afterRemoveRPM.sh for improved service management and cleanup
ed2c5da2d5 fix: remove unnecessary __init__.py creation from Dockerfiles and update gunicorn worker class to gthread
d6fff9acff fix: update gunicorn to use gthread and bump boto3 and botocore versions for compatibility
12c4c12568 fix: add shield emoji to post-installation message for enhanced user experience
719eff3827 fix: simplify beforeInstall.sh by removing OS checks and focusing on nginx backup
65040dec6f fix: ensure __init__.py exists for zope to avoid import failures
d5b6fe6c03 fix: update troubleshooting and web UI documentation for clarity and accuracy in user management instructions
38c3a6751f fix: simplify Flask secret handling by removing length validation and using a constant length for generated secrets
3fe723cda2 fix: remove TOTP_SECRETS environment variable from dev Docker Compose files
afa22f627c fix: streamline secret loading by checking for files in LIB_DIR and removing redundant environment variable handling
69b59ef68e fix: update recovery code display to adapt background color based on theme
ac104b223c fix: update documentation to format setup wizard instructions as examples
05338fbee2 fix: clean up changelog content processing in GitHub Actions workflow
571aed1f0c fix: enhance metrics logging by adding request ID and add Redis requests handling
b9879419af fix: update HTTP3 configuration to include TLSv1.3 checks and streamline rule removals
eee1e191e0 fix: optimize IP key handling and enable decode responses for Redis client
82a98317ea fix: update package versions in requirements files for consistency and compatibility
e2d90a1bf8 fix: enhance logging and fix ingress class filtering logic in IngressController
7fcaf68fbb fix: update upgrade instructions to correct step numbering and improve clarity
687806f4d9 fix: update regex in headers.lua to capture all characters after the colon
7f7c6ebdc2 fix: refine provider checks for DNS and HTTP challenges in certbot-new.py
7b9e990349 fix: update HTTP3 configuration to disable it  when proxy protocol is in use
220732b74f fix: fix Open Redirect Vulnerability in Loading Page + fix shenanigans with setup wizard
cf64ad4a16 fix: enhance CORS validation to support AJAX requests
d1d77207b7 fix: update regex for server name validation in settings.json
c339a43d0c k8s - fix missing namespace in pod hostname
6bbbbac224 k8s - fix hostnames, add KUBERNETES_DOMAIN_NAME and fix service with name only
8b7ff00ffd fix: streamline UI startup command by using sudo for nginx user execution
37249a11cf chore: update package versions in requirements files
1bfe6a6f69 Merge pull request #1737 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.5
da4f65df4f fix: add patch script validation and execution for Core Rule Set (CRS) nightly jobs
57fa77726b fix: update default preference for column 10 to true in reports dataTables in web UI
76c72029da refactor: update theme handling in templates and enhance SSL configuration logic
af3d7b0fa4 Fix shenanigans with cloned services using the autoconf method
cd5c5821b8 fix: Ignore services not using let's encrypt
c3354cf27d refactor: update file permission commands in Dockerfiles to exclude modsecurity files
d9068c22de refactor: remove debug logging of SQLAlchemy connection string in Database class
3825b38fd8 refactor: move debug logging setup to the command execution block in CLI
cf8671655c Merge branch 'dev' of github.com:bunkerity/bunkerweb into dev
f4974fbb9a modsecurity - retrieve matched rules
3b8ab7c964 refactor: move debounce function to common.js and clean up usage across scripts
cb62f550ec feat: add persistent column preferences in database
66ac7c72b0 deps/gha: bump github/codeql-action from 3.27.4 to 3.27.5
313edb4df3 fix: fix alias validation in LE DNS models
82deac2ef9 fix: remove unused certs volume from DNS examples in Docker Compose files
f07d7a6ca7 feat: Add examples for major DNS providers
6d90307bf9 feat: replace custom ModSecurity configuration with CRS plugin URL for Nextcloud examples
1d7182a48d feat: replace custom ModSecurity configuration with CRS plugin URL for WordPress examples
97f9da0c87 feat: update Drupal examples to include MODSECURITY CRS plugin URL and specify TCP/UDP protocols in Docker Compose
02ae9aa12e fix: specify TCP and UDP protocols for port mappings in examples Docker Compose files
52fb19e45d feat: add validation aliases for DNS provider API tokens and keys
792e7551c8 Merge pull request #1732 from bunkerity/dependabot/github_actions/dev/docker/metadata-action-5.6.1
4f313e0fd6 Merge pull request #1731 from bunkerity/dependabot/github_actions/dev/aquasecurity/trivy-action-0.29.0
0f930e66aa fix: add DATABASE_URI to environment variables in CLI command execution
3d7648dac0 fix: add debug logging for SQLAlchemy connection string in Database class
f4a04e2780 feat: enhance BunkerWeb installation scripts and Dockerfiles
a73c8083f3 Merge pull request #1735 from aptkzzz/dev
e8fd630c1c chore: remove documentation and GitHub workflows for coreruleset v3 and v4
774c1a697e fix: ensure UI is stopped before starting in bunkerweb-ui script
ac2c5de1da fix: rename environment variable for UI template usage in configuration files
d15d750cb5 fix: update environment variable name for custom CA in Kubernetes API documentation
2bc76e4764 backup /etc/nginx folder before install
61ba790c7b deps/gha: bump docker/metadata-action from 5.5.1 to 5.6.1
bd8ccbb722 deps/gha: bump aquasecurity/trivy-action from 0.28.0 to 0.29.0
db181b546e Merge pull request #1729 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-8.10-9.1731462872
fdf8379e83 Merge pull request #1726 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-d497966
d2578d31ea fix: update regex for server name validation to respect RFC1035
9f737f9fec fix: enhance condition checks in Configurator for variable handling
d218f610c5 feat: implement column visibility management for reports, cache, jobs, and instances tables with localStorage support
2135ef8769 refactor: format JSON and Lua files for improved readability and consistency
53ac7975a6 fix: use right function to get the security mode in limit plugin
d809f2f8a0 fix: update get_reason function to correctly retrieve security mode from context
a5ef0d23eb refactor: improve data handling in whitelist, greylist, and blacklist initialization + enhance logging for loaded entries
2e2639e467 refactor: enhance real IP configuration handling for multisite support and improve file reading logic + fix download logics with global variables
8a66783ff4 fix: update current_time calculation to use local timezone in cache validation
750587fe2d refactor: simplify service_id handling in database queries
8b77cd39e9 deps/tests/linux: bump redhat/ubi8-init in /tests/linux
98d7b2cd9f deps/linux: bump redhat/ubi8 from `8990388` to `d497966` in /src/linux
ca7f2a25ba fix: update package versions in requirements files for compatibility and security
43841ca5a9 Merge pull request #1724 from bunkerity/dependabot/docker/src/linux/dev/ubuntu-278628f
0f7944b4ab Merge pull request #1721 from bunkerity/dependabot/docker/tests/linux/dev/ubuntu-278628f
c6fe29fe53 fix: update Dockerfiles to address CVEs by adding required PostgreSQL client libraries
2dbd99a181 feat: standardize whitespace in conditional statements across configuration files
9806f0fc72 fix: add keep_trailing_newline option to FileSystemLoader in Templator
6b233f7774 fix: two variables had the same name but different purposes in realip-download.py
5e10b066ca feat: add REMOTE_PHP_PORT setting to configure remote PHP-FPM port
80250fdd13 fix: update regex for reverse scan ports to enforce valid port ranges
0a29cff031 fix: update regex for HTTP3 Alt-Svc port to only allow valid ports
e648db58c5 fix: update regex for cookie flags to allow empty values
ee635c36a6 ui: enhance table responsiveness and add tooltips for better accessibility
53e1e4189b ui: Update DOMPurify to version 3.2.0
927ca6a110 ui: Update ace editor to version v1.36.5
cea64f0ad6 fix: adjust minimum settings requirement for non-draft forms
6f96113a9a deps/linux: bump ubuntu from `99c3519` to `278628f` in /src/linux
fe913dc03a deps/tests/linux: bump ubuntu in /tests/linux
a94d7c7a97 docs: update wildcard certificate documentation to clarify DNS challenge requirement
a1f42dd944 feat: enhance Let's Encrypt challenge handling for wildcard certificates
7e83f180c1 Start adding documentation about SECURITY_MODE
99f1190dfd fix: update Dockerfiles to use --force-reinstall for pip installations
46c61a5667 feat: enhance reports filtering and update DataTable column visibility
51e658cd3e bw - improve security mode feature
14a0b7dc1c bw - init work on detect only mode
826631291f fix: remove unsupported letsencrypt_dns plugin and clean up related data handling
23b7ef6ee1 fix: enhance get_ui_roles method to handle exceptions and return error messages
c3c5826f64 cleanup: remove deprecated Dependabot configurations for various ecosystems
6411413452 Merge pull request #1710 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-9.5
1e8b96be7e Merge pull request #1711 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-9.5
f81392b0fe Merge pull request #1719 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.4
bc32128280 Merge pull request #1698 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.1.0
196b8de3cc Merge pull request #1687 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.202.0
283ba79ed4 deps/gha: bump github/codeql-action from 3.27.0 to 3.27.4
d7f9a5473f Refactor templates and routes for improved configuration handling and UI consistency
8c926d2132 Fix filtered_settings argument to use tuple syntax in database queries
9fa8ab5483 Add Let's Encrypt configuration options to template files
8440bfbd87 Add DATABASE_RETRY_TIMEOUT to Configurator class configuration options
73554d994a Remove deprecated DNSBL server from default list in plugin configuration
216930e74d deps/linux: bump redhat/ubi9 from 9.4 to 9.5 in /src/linux
1c314fb1d0 deps/tests/linux: bump redhat/ubi9-init in /tests/linux
68d2c78ee6 Change log level from error to warning when no server names are provided in letsencrypt plugin's jobs
1052e1564a ui - refactor theme handling in templates to use a unified 'theme' variable and move upgrade to pro button
d107dd4223 Merge commit 'ae0e60ad387c118ac75a079208d52a443bed4502' into dev
ae0e60ad38 Squashed 'src/deps/src/luajit/' changes from 33d6b04681..098183d9d2
234c7436aa Update LuaJIT version to v2.1-20241113 in dependencies
bae9cb13d9 ui - enhance setup configuration for Let's Encrypt options
52a3814728 ui - update redirect logic to exclude /.well-known paths
4f4cc755ef ui - update Python base image to 3.13-alpine for Dockerfiles
deed0e6dd1 ui - remove redundant redirect from root to /setup
0af8eae0a3 ui - redirect to /setup (again)
d020c90280 ui - fix typo in setup config
9116008736 ui - redirect setup wizard to /setup
ea09e8b72e ui - fixe couille dans le potage with setup wizard on firefox
a0996041d4 Refactor CSS transitions for smoother effects and update HTML to support dynamic theme attributes
c6d5061cd4 Suppress SQLAlchemy warnings for DELETE statements in Database.py
444961ec99 Update docs about let's encrypt
6d46635a5e Update dependencies and add Let's Encrypt DNS challenges support
7d473beefa Add autocomplete attribute for password input fields in input_setting.html
b0006a6c94 Update regex pattern for cookie flags in plugin.json for improved validation
f4cf510d13 deps/gha: bump softprops/action-gh-release from 2.0.9 to 2.1.0
7e8f1ef25d init work on letsencrypt_dns core plugin
b11769116f deps/gha: bump ruby/setup-ruby from 1.201.0 to 1.202.0
c93759541b Fix id issue with inject plugin
4ff678037a Update dependency versions for nginx in fpm configuration files to allow version range
eae5439861 Add support for injecting HTML before the </head> tag in inject plugin
d90b980cc6 Update regex patterns in plugin.json for improved validation
8de3c5a2a0 Update Dockerfiles to address CVEs and improve dependency versions
fe2a37743b Update dependency versions in requirements files for improved compatibility
4a63e72af0 Merge pull request #1648 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.0.9
8dd0cdd5a2 Merge pull request #1668 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-8.10-9
df13c9bff9 Merge pull request #1671 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-8990388
4c42dcf7a1 Merge pull request #1674 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.201.0
fa2079a4b4 Update button alignment in templates to use 'justify-content-evenly' for improved layout consistency
9c9ce5a55d Refactor theme handling in login page to prioritize saved preferences from localStorage before falling back to system color scheme
175cc70b70 Add theme handling in setup and login processes, enhance UI theme toggle functionality
d598cb4276 Add mode selection handling in global config and update templates for improved UI
25c3b13167 Add export functionality for services and enhance variable handling in service page
ebbfc6418d Enhance action button tooltip behavior and add export functionality for services
a17bc069c1 deps/gha: Bump ruby/setup-ruby from 1.197.0 to 1.201.0
188f58b3ce Add check for non-empty servers before setting SERVER_NAME in config
f093202a7b Set default theme to 'light' for AnonymousUser model
f05acb2080 Set default theme to 'light' in base template if not specified
33d07aef64 Add Enter key functionality to save plugin settings and fix condition for minimum settings check
89a827f2a8 deps/linux: Bump redhat/ubi8 from `a965f33` to `8990388` in /src/linux
7a8cfedb08 deps/tests/linux: Bump redhat/ubi8-init in /tests/linux
325bd51dc9 Fix infinite /setup loop in web UI when upgrading from 1.5.X
f39d32a6e5 Run plugin download jobs in parallel for improved performance
9f6307afe0 Monthly mmdb update
7c7a67ab65 Enhance backup functionality with forced backup option and version change handling
c03c1b5406 Add TRIVY_DB_REPOSITORY environment variable to container build workflow
45ffdf4f06 Update support for Fedora to version 41 and drop support for version 40 across workflows, Dockerfiles, and documentation
e99e674e59 Update nginx dependency to exact version for RHEL package configurations
ba0a2c6643 Fix typo in post-installation message for consistency
6e27f4bf00 Update CHANGELOG.md file
983adf64a1 Add the possibility to run plugins job in async mode to avoid running them in order in the scheduler by setting the `async` key to `true` in the plugin job configuration (default is `false`)
a7828e04d2 Add PGDATA environment variable to PostgreSQL configuration files for data directory management
29993335b8 Add PostgreSQL client and libpq to Dockerfiles to address CVE-2024-7348
6a7d3ebc34 Remove redundant autoconf instance clearing logic in save_config.py for improved clarity
6094d779bd Refactor save_config.py and main.py to utilize dotenv for environment variable management and improve path handling
3117ab5a8b Refactor logger setup in save_config.py for improved clarity and add warning for autoconf instance clearing
c97332e864 Refactor blacklist, greylist, realip, and whitelist download scripts to improve cache cleanup logic and enhance logging messages
ccba2f12ee Fix typos in post-install script messages for clarity
268307d84d deps/gha: Bump softprops/action-gh-release from 2.0.8 to 2.0.9
ef508c319c Standardize environment variable assignment in Dockerfiles for consistency
8a1c32af51 Enhance post-install script with setup wizard activation message and additional resources
bff790e0a0 Add reverse wizard logic where the wizard is activated by default and USE_WIZARD=no has to be set to deactivate it when installing a Linux integration
f15b5eea61 Update error printing to keep only what's necessary in jobs
41540fcda2 Handle no longer used urls in list downloads jobs
1c3fea7f09 Refactor realip and greylist download scripts to improve caching logic and reduce unnecessary downloads
aaa7aa2fb8 Merge pull request #1635 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-9.4-14.1729775103
8ab846bf49 Merge pull request #1630 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-ee0b908
7db2dadf7f Refactor send_file_to_bunkerweb function to improve instance status handling and simplify control flow
804937207a Refactor Dockerfile to streamline file copying and improve directory structure
23b29f027b Add requirements file for generation dependencies in autoconf Dockerfile
99ce9caa12 Refactor CLI.py to update dependency paths and reorder imports
e1196ffbc9 Update ApexCharts web UI lib to v4.0.0
f31dd2bf46 Add fallback API instance for CLI when database is unavailable
a5ed94c835 Update Core Rule Set v3 to version v3.3.7
bcd3ff63eb Refactor setup_page() function to include USE_UI configuration option
806f2632f2 Update Core Rule Set v4 to v4.8.0
5819cebd61 Fix upgrade procedures commands
08167b70b5 Refactor database code to remove unused UI version field
c1fe1a5483 Fix shenanigans with separated model by joining them into one
b71cf63cb0 Add warning about PostgreSQL 17 not supported in Docker integration
f6c343b547 Finish dark mode in web UI (awaiting review)
c9c479b04f k8s - init work on custom CA and ingress class
d20f926078 Start adding dark mode in best effort for web UI
3ead15cdd1 Refactor toast styling and add border to feedback toast
56dd0f069c Add custom cert to setup wizard + Make it possible to edit some settings when the service is created using the wizard
aa46ba62d2 Fix upgrade issues from 1.5 to 1.6
892ca65552 Refactor backup UI actions and update cache file
5f8bc4ec82 autoconf - add KUBERNETES_VERIFY_SSL env var
e60c5a8253 deps/tests/linux: Bump redhat/ubi9-init in /tests/linux
450b1c0b3d deps/linux: Bump redhat/ubi9 from `b00d599` to `ee0b908` in /src/linux
8925e5c71c linux - fix python3-devel package name dependency for RHEL9
e3c968e8ae linux - add missing dependency for rhel9 aarch64*
9cec9ff762 ci/cd - temp disable arm build for beta release
cdf47c9613 ci/cd - fix push docker images steps
3ebc9a2ee4 ci/cd - remove unused secrets in beta wf
0dd1f53fb8 Update templates
71e70a0728 Refactor template configuration reset function when changing template in easy mode
ed90073ff7 Update python deps
7032edd9f5 Make it so that _URLS settings are now multisite
6d342abce9 Add a lot of QOL in web UI
a01b0a26a5 Merge pull request #1616 from bunkerity/dependabot/github_actions/dev/actions/checkout-4.2.2
e4cb4049e2 deps/gha: Bump actions/checkout from 4.2.1 to 4.2.2
e568c3efd6 Merge pull request #1610 from bunkerity/dependabot/github_actions/dev/actions/upload-artifact-4.4.3
b8b8f8e12e Merge pull request #1609 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.0
815558ee67 Merge pull request #1622 from bunkerity/dependabot/github_actions/dev/actions/setup-node-4.1.0
d5f8acfc8f Merge pull request #1623 from bunkerity/dependabot/github_actions/dev/actions/setup-python-5.3.0
461de8a98a Refactor get_config method to handle first run flag
196c1a458a Refactor plugin page rendering to handle old templates gracefully
788ccb1d3a Finish migrating old core plugins' UI pages to new way of doing it
366e5d7c1c Refactor CSS transitions in overrides.css for smoother user experience
4205aa6543 Refactor sorting order in services.js to use the first column
ab76d6074f Refactor UIData load_from_file method to handle empty data
4badcdd917 deps/gha: Bump actions/setup-python from 5.2.0 to 5.3.0
0bcead3cce deps/gha: Bump actions/setup-node from 4.0.4 to 4.1.0
9c67ee143c Start migrating core plugins' pages to the new format
3058a629bf Refactor modsec ui.conf to remove specific SecRule by ID
7b5eac44b3 Fix JobScheduler to run jobs in plugins's order
6e43766e23 Refactor Config class to ignore non-editable variables managed by specific methods
8cf603526d Refactor JobScheduler reload method to use custom timeout
61f8b834eb Refactor Database.py to simplify service setting handling
b73861db5e Change background of login/loading/setup/totp pages in web UI
2bcf8c57da Add documentation about the Scheduler's built-in healthcheck system
4abb20b6e7 [#1525] Add the possibility to defined a custom timeout to api calls and set a linear one depending on the number of services upon reload
caaff13678 Refactor plugin_page.html to improve card title and subtitle styling
f29095a555 Add "service" field in bans when sending it to the API from bwcli
0d6fdbdd18 [#1460] Add "service" field in bans and reports
609dfc3cdc Update flag icons and optimize date conversions + Add auto refresh buttons to reports page in web UI
e4c17ec988 Refactor service conversion message to include the converted service type
a5f02a1a2d deps/gha: Bump actions/upload-artifact from 4.4.0 to 4.4.3
e343e5077c deps/gha: Bump github/codeql-action from 3.26.13 to 3.27.0
3a6caf1644 Optimize and made some tweaks for QOL reasons in web UI
5529f312c1 Update Python base image to version 3.13.0-alpine
2c7669a589 Update Python base image to version 3.13.0-alpine
1bb6dbc824 Merge pull request #1601 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.197.0
fcd5dfab1b deps/gha: Bump ruby/setup-ruby from 1.194.0 to 1.197.0
bd46dcf094 Merge pull request #1594 from bunkerity/dependabot/github_actions/dev/aquasecurity/trivy-action-0.28.0
2d21ed16bc Merge pull request #1591 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.26.13
1263cfa838 Merge pull request #1569 from bunkerity/dependabot/github_actions/dev/actions/checkout-4.2.1
ba5fab1a1f Merge pull request #1560 from bunkerity/dependabot/github_actions/dev/docker/setup-buildx-action-3.7.1
980623ce76 Update ace web UI lib to version v1.36.3
061fbe45e5 Update apexcharts web UI lib to version v3.54.1
56ffc1b290 Add some QOL tweaks discussed in an early reunion to web UI
793bef233b Merge commit 'a9b812744dfe7270938fff18b278271cf508f8c2' into dev
a9b812744d Squashed 'src/deps/src/mbedtls/' changes from 71c569d44b..107ea89daa
51038ce009 Merge commit '379de6ab05e53da9603c279b6147e06ea3ca4a1c' into dev
379de6ab05 Squashed 'src/deps/src/lua-resty-lrucache/' changes from 129314760..3ff6300e6
96dbc4be23 Merge commit '85f860ffc79f6ef6f744ad595c0de0210de5e3ce' into dev
85f860ffc7 Squashed 'src/deps/src/lua-resty-core/' changes from fa3cd7aec..2da3d7719
401f9c9b87 Updated lua-resty-core version to v0.1.30, lua-resty-lrucache version to v0.15, Mbed TLS version to v3.6.2
4f107a9b54 Update python deps
e57f825ba5 Tweak a few things in the web UI
34c2210cde deps/gha: Bump aquasecurity/trivy-action from 0.24.0 to 0.28.0
fbd44826dd deps/gha: Bump github/codeql-action from 3.26.10 to 3.26.13
7183d33fe2 deps/gha: Bump actions/checkout from 4.1.7 to 4.2.1
e7cc450af9 Start preparing the field for plugin pages in web UI
b2f9fab7ad Run pre-commit-config and apply it + update it
c73e9bf161 Refactor datatable filtering options in web UI
756af7becb Refactor datatable filtering options in web UI
98c4aafa14 Fix configs edits when they are from templates
4dc9c4a6cd Made a few tweaks about fonts and added more options for filtering for datatables in web UI
4d3d3dc0c1 Update apexcharts lib to latest version in web UI
bcb5321583 Add Don José and Courier Prime fonts + Fix shenanigans with setup wizard in web UI + Add lottie to loading screens
3049047a20 Fix config saving logic with template variables and global values
65ae43d626 Monthly mmdb update
c5fcb9d4b7 deps/gha: Bump docker/setup-buildx-action from 3.6.1 to 3.7.1
15b473ba26 Add about page and start adding pro page to web UI
0bf3af7089 Tweak setup wizard to enhance whole process
f8827f31ea Lint HTML file with djlint
91637a9e21 Use NGINX mode in all editors while ModSecurity highlighting syntaxes aren't available
7fc869a8ba Tweak REVERSE_PROXY_INCLUDES regex to be less restrictive
49c12e71b2 Add fallback to local mmdb file if the download.db-ip.com domain isn't reachable
bf873339e7 Soft merge branch '1.5' into dev
28a3d30cef Add documentation for new WORKERLOCK_MEMORY_SIZE setting
7b297ced63 Merge pull request #1521 from PathToLife/master
53b4c8d0aa Fix regex pattern for intercepted error codes in plugin.json
782ae973c7 Fix regex pattern for intercepted error codes in plugin.json
8b600d1891 Update psycopg version in requirements
82d9d09779 Update psycopg version to 3.2.3 in requirements files
8306f9c098 Update durationpy to version 0.8
40bb729d8c Update Python base image in Dockerfiles
b9fa48f2bc Update dependencies for UI, core, scheduler, and documentation
e1d8611969 Merge pull request #1541 from bunkerity/dependabot/github_actions/1.5/docker/build-push-action-6.9.0
2ca69dabb4 Merge pull request #1540 from bunkerity/dependabot/github_actions/1.5/github/codeql-action-3.26.10
803ea066c1 Merge pull request #1539 from bunkerity/dependabot/github_actions/1.5/ruby/setup-ruby-1.194.0
97a18b6101 Merge pull request #1535 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.26.10
d3411630c7 Merge pull request #1534 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.9.0
3d316cb9d9 Merge pull request #1519 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-8.10-7
0688a5b931 Merge pull request #1516 from bunkerity/dependabot/docker/tests/linux/1.5/redhat/ubi9-init-9.4-14.1726695630
5b936b8ed0 Merge pull request #1518 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-a965f33
20387a6ba5 Merge pull request #1523 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.194.0
35df6e8175 Merge pull request #1522 from bunkerity/dependabot/github_actions/dev/actions/checkout-4.2.0
f2bf07d119 Merge pull request #1538 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi9-b00d599
3b955a30fc Merge pull request #1537 from bunkerity/dependabot/docker/src/linux/1.5/debian-ad86386
c0f3c52cf5 Merge pull request #1536 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi8-a965f33
10cb4c10c2 Merge pull request #1517 from bunkerity/dependabot/docker/tests/linux/1.5/redhat/ubi8-init-8.10-7
78938a838c Merge pull request #1515 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-9.4-14.1726695630
2ddeba328a Merge pull request #1514 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-b00d599
ccc7306ad2 Merge pull request #1510 from bunkerity/dependabot/github_actions/dev/actions/setup-node-4.0.4
3878033e4d Merge pull request #1503 from bunkerity/dependabot/github_actions/1.5/actions/setup-python-5.2.0
a76ab412e9 Merge pull request #1501 from bunkerity/dependabot/github_actions/1.5/docker/login-action-3.3.0
26459853ce Merge pull request #1496 from bunkerity/dependabot/docker/src/linux/1.5/fedora-d0207db
9894bc0f19 deps/gha: Bump docker/build-push-action from 6.5.0 to 6.9.0
2d57bbbe30 deps/gha: Bump github/codeql-action from 3.26.7 to 3.26.10
0d6780fb7b deps/gha: Bump ruby/setup-ruby from 1.192.0 to 1.194.0
6c780986e9 deps/linux: Bump redhat/ubi9 from `7575b6e` to `b00d599` in /src/linux
3cb91d9382 deps/linux: Bump debian from `a629e79` to `ad86386` in /src/linux
ce219c0239 deps/linux: Bump redhat/ubi8 from `fbfce63` to `a965f33` in /src/linux
6653c80a5c deps/gha: Bump github/codeql-action from 3.26.9 to 3.26.10
4da9a699b7 deps/gha: Bump docker/build-push-action from 6.7.0 to 6.9.0
eb35eecb0b Merge pull request #1494 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi8-fbfce63
5c2cb3f753 deps/linux: Bump fedora from `5ce8497` to `d0207db` in /src/linux
55713a7f2c Merge pull request #1493 from bunkerity/dependabot/docker/tests/linux/1.5/debian-b8084b1
7cd9c2fc33 deps/tests/linux: Bump debian in /tests/linux
edb4cad78c Merge pull request #1488 from bunkerity/dependabot/docker/tests/linux/1.5/fedora-d0207db
c0ea53c21a Merge pull request #1487 from bunkerity/dependabot/docker/src/linux/1.5/debian-a629e79
e6acb2d5a4 Merge pull request #1486 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi9-7575b6e
276e43c6d7 Merge pull request #1500 from bunkerity/dependabot/github_actions/1.5/actions/upload-artifact-4.4.0
59fd259339 Merge pull request #1499 from bunkerity/dependabot/github_actions/1.5/hashicorp/setup-terraform-3.1.2
c34a0d19a5 Merge pull request #1520 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.26.9
09e84bf754 Update python deps in tests
666f903933 Update python deps
773d50738f Refactor flash function call to flask_flash for better error handling when the database has fallen back
174e437046 Refactor Job Scheduler for better performance
5989988c93 Optimize Templator rendering process for faster performance
a272448242 Refactor save_config method to greatly accelerate config saves
4d0a53ec90 Refactor Config class to use ThreadPoolExecutor for processing services
d8c4315c47 Fix handling of non-draft services in pro metadata
17331d6a5a Update DB diagram
daced9429e Fix iso-prod ui file with misc configs
d7863f8df2 Add setup wizard page and optimize a few pages
970874e983 Update coreruleset-v4 version to v4.7.0
e2d5247592 Refactor modsec-crs UI routes to conditionally remove rules for specific URLs
1cc221176e Refactor UI routes to pass services to config edit and config new pages
12057ffa8d Add home page and plugins page to web UI
071bb9e4ac Refactor Database.py to conditionally set the database URI and update metadata for non-draft services
255d4a8f20 deps/gha: Bump ruby/setup-ruby from 1.192.0 to 1.194.0
2b72cec14a deps/gha: Bump actions/checkout from 4.1.7 to 4.2.0
77b1b665f8 fix ngx_slab_alloc() failed: no memory for arm64 linux rpi pagesize 16k. Increase initialization lua_shared_dict size to 48k
001cbf28dd deps/gha: Bump github/codeql-action from 3.26.6 to 3.26.9
aeee440f0d deps/tests/linux: Bump redhat/ubi8-init in /tests/linux
b10b936931 deps/linux: Bump redhat/ubi8 from `fbfce63` to `a965f33` in /src/linux
42350a1e9b deps/tests/linux: Bump redhat/ubi8-init in /tests/linux
be4820966d deps/tests/linux: Bump redhat/ubi9-init in /tests/linux
d889aa66d4 deps/tests/linux: Bump redhat/ubi9-init in /tests/linux
98bfd6b488 deps/linux: Bump redhat/ubi9 from `7575b6e` to `b00d599` in /src/linux
33eea02c6e Add readonly specifications to ui routes
1263484e52 Refactor Database.py to conditionally set the database URI
f180404c8d Refactor Dockerfile path in integrations.md
e723912588 Add notification sidebar to web UI with back-end logic
4f9e0e1fea Optimize and fix stuff in web UI
c021b24082 Refactor filter condition in Database.py to use 'type' instead of 'method'
ead4cc91ba Start separating overrides made in template files (css, js, ...)
059702b03d Lint HTML files
c6d9846279 Add reports, bans, logs and jobs page to web UI
16582d7857 deps/gha: Bump actions/setup-node from 4.0.3 to 4.0.4
b75a0fe5f5 Add configs and cache page to web UI
65dd49f2bc deps/gha: Bump actions/setup-python from 5.1.1 to 5.2.0
6169610199 deps/gha: Bump docker/login-action from 3.2.0 to 3.3.0
fbeb529435 deps/gha: Bump actions/upload-artifact from 4.3.4 to 4.4.0
8baa13748c deps/gha: Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2
a968956c5b deps/linux: Bump redhat/ubi8 from `44d7500` to `fbfce63` in /src/linux
97561c9898 deps/tests/linux: Bump fedora in /tests/linux
a7531701fe deps/linux: Bump debian from `d02c76d` to `a629e79` in /src/linux
ac30c49750 deps/linux: Bump redhat/ubi9 from `1ee4d8c` to `7575b6e` in /src/linux
b454f2cf86 fix type for REVERSE_PROXY_SSL_SNI_NAME setting and fix nginx dependency condition for fedora package
530ee80cfa ci/cd - fix wrong deb filename for linux UI tests
15fa91d53e Merge pull request #1375 from spwoodcock/docs/allowed-methods-post
13444ed5d2 Merge pull request #1433 from jbbandos/master
d285dc97a2 Merge pull request #1394 from eltociear/patch-1
19b081e92c Merge branch '1.5' into patch-1
fed29e2335 Merge pull request #1474 from jonas0b1011001/patch-1
588b634ded dompurify update
1cf03d454c update nginx version to 1.26.2 and update deps
492b5b1944 Finish features for easy mode in services page + start adding actions to services page
086de4fb54 Refactor main.py to handle custom config retrieval and handling more efficiently
50c3b9473f Refactor Database.py to improve custom config retrieval and handling
ce410069af Refactor low.json and low_anomaly_score.conf for modsec settings
118fd50c43 Merge pull request #1480 from bunkerity/dependabot/npm_and_yarn/src/ui/dompurify-3.1.3
fa0b7e0ee3 Merge pull request #1483 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.192.0
5927a8cfae deps/gha: Bump ruby/setup-ruby from 1.191.0 to 1.192.0
7054ee2341 linux - improve logging for jobs
037289e4dd chore(deps): Bump dompurify from 3.0.9 to 3.1.3 in /src/ui
1acef1f69d lets encrypt - force regeneration of certs when switching environment (prod/staging)
f73632f8c7 Enhance QOL in web UI in general + made advancements in easy mode for services
398a33ccfe Refactor templates values gathering for multisite settings
6ee2609ad8 Allow HTTP Request Method REPORT
274c1260d9 linux - fix scheduler logs
27152f0977 Add services page to web UI and finish raw mode for service settings v1
37cdd322af Update iso-prod files
6224fb8930 Add keyword filtering feature to advanced settings display in web UI
7f0356c098 Ignore DYNPKG_RELEASE variable in Configurator
abf392729c Update pytz version to 2024.2
29a2582f4b Fix shenanigans with setup wizard
8000b93f3e Fix ignoring of DYNPKG_RELEASE variable in Configurator
e43dc79b92 Update dependencies
d601c88f82 Update Python Alpine base image to version 3.12.6
ce2df607f3 Merge pull request #…

Author: TheophileDiot

.dockerignore

@@ -0,0 +1,8 @@
+.git
+.idea/
+.vscode/
+__pycache__/
+
+env/
+src/deps/tmp_venv/
+tests/

.gitattributes

@@ -0,0 +1,21 @@
+* text=auto eol=lf
+
+# Folders
+src/deps/src/** -text -eol linguist-vendored=true
+src/common/core/modsecurity/files/** -text -eol linguist-vendored=true
+src/ui/static/js/editor/** -text -eol linguist-vendored=true
+src/ui/static/js/utils/purify/** -text -eol linguist-vendored=true
+src/ui/static/webfonts/** -text -eol linguist-vendored=true
+src/ui/templates/*.html -text -eol linguist-vendored=true
+src/common/core/antibot/files/*.html -text -eol linguist-vendored=true
+
+# Files
+src/deps/misc/lua-pack.Makefile -linguist-vendored=true
+src/deps/misc/ngx_http_modsecurity_access.c -linguist-vendored=true
+src/ui/static/css/datepicker-foundation.css -linguist-vendored=true
+src/ui/static/css/flatpickr.css -linguist-vendored=true
+src/ui/static/css/flatpickr.dark.css -linguist-vendored=true
+src/ui/static/js/tsparticles.bundle.min.js -linguist-vendored=true
+src/ui/static/js/utils/flatpickr.js -linguist-vendored=true
+src/common/core/errors/files/error.html -linguist-vendored=true
+src/common/core/misc/files/default.html -linguist-vendored=true

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,91 @@
+name: 🐛 Bug Report
+description: Create a report to help us reproduce and fix the bug
+title: "[BUG] "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: >
+        #### Before submitting a bug, please make sure the issue hasn't been already addressed by searching through [the existing and past issues](https://github.com/bunkerity/bunkerweb/issues?q=is%3Aissue+sort%3Acreated-desc+).
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: Concise description of what you're trying to do, the expected behavior and the current bug.
+      placeholder: Describe the bug, the expected behavior and the current behavior
+    validations:
+      required: true
+  - type: textarea
+    id: how-to-reproduce
+    attributes:
+      label: How to reproduce?
+      description: Concise description of how to reproduce the issue.
+      placeholder: Describe how to reproduce the issue
+    validations:
+      required: true
+  - type: textarea
+    id: configuration-file
+    attributes:
+      label: Configuration file(s) (yaml or .env)
+      description: |
+        Please copy and paste your configuration file or the relevant part of it.
+        ⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️
+      placeholder: Configuration file
+      render: YAML
+  - type: textarea
+    id: logs
+    attributes:
+      label: Relevant log output
+      description: |
+        Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks.
+        ⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️
+      placeholder: Log output
+      render: shell
+  - type: input
+    id: version
+    attributes:
+      label: BunkerWeb version
+      description: What version of BunkerWeb are you running?
+      placeholder: Version
+      value: 1.6.0-rc2
+    validations:
+      required: true
+  - type: dropdown
+    id: integration
+    attributes:
+      label: What integration are you using?
+      options:
+        - Docker
+        - Autoconf
+        - Swarm
+        - Kubernetes
+        - Linux
+        - Ansible
+        - Vagrant
+      default: 0
+    validations:
+      required: true
+  - type: input
+    id: linux-distribution
+    attributes:
+      label: Linux distribution (if applicable)
+      description: What Linux distribution are you using? (e.g. Ubuntu Server 18.04)
+      placeholder: Linux distribution
+  - type: checkboxes
+    id: removed-private-data
+    attributes:
+      label: Removed private data
+      description: |
+        We would like to emphasize that we are not responsible for any private data that may be inadvertently included in the logs or configuration files.
+        ⚠️ I have removed all private data from the configuration file and the logs ⚠️
+      options:
+        - label: I have removed all private data from the configuration file and the logs
+          required: true
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: Code of Conduct
+      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/bunkerity/bunkerweb/blob/master/CODE_OF_CONDUCT.md)
+      options:
+        - label: I agree to follow this project's Code of Conduct
+          required: true

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,29 @@
+name: 📚 Documentation enhancement
+description: Suggest an idea that will improve BunkerWeb documentation or declare a bug in the documentation
+title: "[DOC] "
+labels: ["documentation"]
+body:
+  - type: markdown
+    attributes:
+      value: >
+        #### Before submitting a documentation enhancement request, please make sure the feature hasn't been already addressed by searching through [the existing and past documentation enhancement requests](https://github.com/bunkerity/bunkerweb/issues?q=is%3Aissue+sort%3Acreated-desc+%5BDOC%5D+in%3Atitle).
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Concise description of the error or what is missing.
+    validations:
+      required: true
+  - type: textarea
+    id: proposed-solution
+    attributes:
+      label: Proposed solution (optional)
+      description: How it should be fixed or what should be added ?
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: Code of Conduct
+      description: By submitting this documentation enhancement request, you agree to follow our [Code of Conduct](https://github.com/bunkerity/bunkerweb/blob/master/CODE_OF_CONDUCT.md)
+      options:
+        - label: I agree to follow this project's Code of Conduct
+          required: true

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,29 @@
+name: 🚀 Feature Request
+description: Suggest an idea that will improve BunkerWeb
+title: "[FEATURE] "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: >
+        #### Before submitting a feature request, please make sure the feature hasn't been already addressed by searching through [the existing and past feature requests](https://github.com/bunkerity/bunkerweb/issues?q=is%3Aissue+sort%3Acreated-desc+%5BFEATURE%5D+in%3Atitle).
+  - type: textarea
+    id: whats-needed-and-why
+    attributes:
+      label: What's needed and why?
+      description: Describe the feature you would like to see in the project and why it should be implemented.
+    validations:
+      required: true
+  - type: textarea
+    id: implementations-ideas
+    attributes:
+      label: Implementations ideas (optional)
+      description: How it should be used and integrated into the project ? List some posts, research papers or codes that we can use as implementation.
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: Code of Conduct
+      description: By submitting this feature request, you agree to follow our [Code of Conduct](https://github.com/bunkerity/bunkerweb/blob/master/CODE_OF_CONDUCT.md)
+      options:
+        - label: I agree to follow this project's Code of Conduct
+          required: true

.github/codeql.yml

@@ -0,0 +1,13 @@
+name: "CodeQL config"
+
+paths:
+  - src/autoconf
+  - src/scheduler
+  - src/ui
+  - src/common
+paths-ignore:
+  - src/ui/static/js/tsparticles.bundle.min.js
+  - src/ui/static/js/editor
+  - src/ui/static/js/utils/flatpickr.js
+  - src/ui/static/js/utils/purify
+  - src/common/core/modsecurity/files