Skip to content

Commit 917109e

Browse files
TheophileDiotTheophileDiot
committed
Squashed 'src/deps/src/nginx/' changes from 37fe983554..da82f28
da82f28ead [REFACTOR] Update requirements files to include importlib-metadata and adjust setuptools version db42fe045b Update CHANGELOG.md file 47c3652347 [FEATURE] Add plugin_list command to CLI for listing available plugins and their commands 9e13f15807 [REFACTOR] Remove LOG_LEVEL parameter from setup_logger calls in job scripts 65a611072b [REFACTOR] Rename utils.py to backup.py and update import statements across the project 9e4c35b1e1 [FEATURE] Rename MODSECURITY_CRS_PLUGIN_URLS to MODSECURITY_CRS_PLUGINS for consistency and update related data migration logic e2b2b7a0fa Add urllib shenanigans back as it can create problems and update psycopg 4e15a76413 [DEPS] Update requirements files to include setuptools and pip with safety notes cbf63d15fd [CONFIG] Update pre-commit configuration to include reports.js in codespell skip list 9c5aa2310a [DEPS] Update urllib3 to version 2.3.0 and adjust autogenerated comments for Python 3.10 c37b2fb626 [DEPS] Exclude test directories from Python requirements update script 4c6c4f9104 Remove everything related to zstd as we are working on it on another branch for now e666be3108 [TESTS] Remove obsolete test files from zstd-nginx-module fff09c5924 [DEPS] Update post_install script for zstd-nginx-module to remove test directory ef062b50dd Merge commit '978165a4fd10558126803cd810a8d57d34580f00' as 'src/deps/src/zstd-nginx-module' 978165a4fd Squashed 'src/deps/src/zstd-nginx-module/' content from commit f4ba115e0b 4b09e1c8d2 [TESTS] Remove obsolete test scripts and related files from zstd CLI tests 73c49c41a8 Merge commit 'b06faf1e8a0d77d298679df8d98cb03324e4da8b' as 'src/deps/src/zstd' b06faf1e8a Squashed 'src/deps/src/zstd/' content from commit 794ea1b0af 67ff7475aa [DEPS] Add zstd v1.5.6 and zstd-nginx-module v0.1.1 to dependencies 95df521ba6 Merge pull request #1906 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.208.0 635e22fca0 Merge pull request #1905 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.12.0 cf405bc77f Remove unnecessary post_install cleanup commands from deps.json 352267d644 Update post_install scripts in deps.json to remove unnecessary cleanup commands d8b6d701b1 Revert "Remove unused test file for lua-gd" 623d68d13b Revert "Remove unused test files for lua-cjson" d5dbd46dcf Remove unused example files and headers from zlib examples directory b61ded6858 Revert "Remove unused test files and scripts from ModSecurity" 90359705c4 Revert "Remove unused example files from zlib examples directory" 60326f392a Revert "Remove unused test files for libmaxminddb" cfa7f5a101 Remove unused example files from zlib examples directory 9aef1a879a Remove unused test files and certificates from stream-lua-nginx-module 9e07798513 Remove unused example files from ngx_devel_kit 51434861db Remove unused documentation files from Nginx integration ba242318bd Remove unused test files and scripts from ModSecurity Nginx integration 3a7a25b568 Remove unused test files and scripts from ModSecurity f2ac67a5e6 Remove unused documentation files for Mbed TLS ddd8a7d4ef Remove unused test files for luasocket a4e550bf16 Remove unused test files for lualogging bddb5f54fe Remove unused test files for LuaJIT e8bccff876 Remove unused test files for lua-resty-upload c71a7d9321 Remove unused test files for lua-resty-string e918e26c8a Remove unused test files for lua-resty-signal 1590573968 Remove unused test file for lua-resty-session 1b31e33a48 Remove unused test files for lua-resty-redis-connector 714105474b Remove unused test files and certificates from lua-resty-redis d3a25aca34 Remove unused test files for lua-resty-mlcache 597aa7d2e3 Remove unused test files for lua-resty-lrucache ab3013359d Remove unused test files and configurations for lua-resty-logger c259780b4f Remove unused test files and libraries from lua-resty-ipmatcher ff1adf0230 Remove unused test files and certificates from lua-resty-http ef98a5ae5e Remove unused Lua JSON encoding and DNS test files e03b67d044 Remove unused certificate generation and test files for mTLS 116a8b5b26 Remove unused test files and configurations for lua-nginx-module 4f5d1919c3 Remove unused test file for lua-gd 402afb17ae Enhance post-install scripts to handle patch failures for multiple dependencies 351ef0cc45 Remove unused test file for lua-ffi-zlib 3ba529359e deps/gha: bump ruby/setup-ruby from 1.207.0 to 1.208.0 7d31b2a8db deps/gha: bump docker/build-push-action from 6.11.0 to 6.12.0 0e4f948eb5 Remove unused test files for lua-cjson b698363c34 Remove unused test files for Lua 5.1.5 c6c9f510ca Add post-install script execution to init_deps.sh 190225c701 Remove unused test files for libmaxminddb 7a7c93255e Remove unused test files for SQL injection and folding tests 76b9e3838d Remove unused test file for lbase64 157836eb37 Remove unused test files for headers-more-nginx-module 8d27236b1a Refactor init_deps.sh to simplify post-install script execution logic 2146e20608 Remove test, doc and example folders in deps 389efdd479 Update .dockerignore to exclude temporary virtual environment and test directories 87fdcb2ece Add order column to bw_selects and update migration scripts for version 1.6.0-rc2 51f6cf570d Add daily migration updates for Docker dependencies in dependabot configuration 92d8af4a5b Bump version to 1.6.0-rc2 and update related Dockerfiles and configurations 642de7313f Add order attribute to Selects model and update related database logic 52b07fe079 Update setup.html to indicate that the Admin Email field is optional fde261abc1 Add blacklist configuration options to JSON templates ccc25fb9f7 Add debug logging for CSRF error handling in main.py 788c2c56bc Fix indentation and formatting issues in bunkerweb-scheduler.sh and entrypoint.sh 159c9475f3 Add error logging for database connection failures in scheduler scripts ee708e44f7 Refactor plugins-settings.js to improve handling of key-value pairs by allowing values to contain '=' characters 855ddaf9f3 Implement SERVER_NAME handling in raw mode for services_service_page 57080e4637 Enhance plugins_settings_raw.html to handle new endpoint and cloning scenarios for SERVER_NAME setting 4b5ef2341f Refactor services_service_page to streamline variable handling in raw mode 2db4905297 Update Dockerfile-debian to use consistent base image SHA256 c09c30fce8 Merge pull request #1898 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.28.1 ddc679f34b Merge pull request #1897 from bunkerity/dependabot/github_actions/dev/stefanzweifel/git-auto-commit-action-5.1.0 26b9dd7837 Update postinstall script to create environment variable files for bunkerweb d5187ddab6 Update Strict-Transport-Security header value and documentation 69fe0f9e8a Fix paths in gunicorn configuration for bunkerweb UI startup script fa48dda8e9 Enhance step data handling in Database class by adding ordering and restructuring data appending 9300d1b4d6 Update pre-commit configuration to upgrade StyLua and Gitleaks versions 9b193e996e [MODSEC] Update UI configuration to remove additional attack protocol rules 4d1da54880 Update advanced documentation e8943e1da7 Improve help descriptions for Brotli and Gzip compression settings 18a8c4611c Add stream support in Kubernetes integration and enhance reverse proxy handling c2bce9d010 Rename 'Security tuning' to 'Advanced' in navigation and clear default whitelist IP addresses in settings documentation f5e183dc99 Fix log message to indicate successful download of good entries in greylist and whitelist scripts 6bfe852b44 Clear default whitelist IP addresses in plugin configuration as DuckDuckBot's ips change too often d44a9b3d3a Update Cloudflare API token alias and change RFC2136 algorithm to HMAC-SHA512 1b28fcd633 Add deprecation notice for Swarm integration in documentation 426f1a0349 Update settings documentation d61c10e8e0 [#1889] Introduce SSL plugin for managing HTTPS settings and fix https redirect bypass when a client was whitelisted 5749947b62 Update changelog for v1.6.0-rc2 and enhance certificate validation in customcert plugin 18535b9307 Merge commit '275874fbb014e0e3ab5a27c7d25c06b4112820b7' into dev 275874fbb0 Squashed 'src/deps/src/libmaxminddb/' changes from 0ff5a5bfb3..cba618d658 466c9c147d Update changelog for v1.6.0 and bump libmaxminddb to v1.12.2 3cbab8a660 Fix logic in SSL certificate validation to ensure proper handling of custom SSL options b66e1f1403 deps/gha: bump github/codeql-action from 3.28.0 to 3.28.1 87c3e4c3c3 deps/gha: bump stefanzweifel/git-auto-commit-action from 5.0.1 to 5.1.0 970a30b65b Refactor limit connection configuration to improve clarity and correct default mappings c97fd79e0e Refactor configuration handling to remove unused parameters and improve clarity in multiple settings processing 383af8f421 Enhance ModSecurity rules by adding additional rule removal for attack-rfi in UI configuration c32f1c10a6 Add error handling for read-only database mode in instances action 3e584f3df9 Add custom SSL configuration options to template files e613148a29 Refactor documentation deployment steps for clarity and improved functionality f25ba38eec Refactor database path handling to use Path object for improved compatibility 9a967805ff Merge pull request #1885 from bunkerity/dependabot/github_actions/dev/actions/upload-artifact-4.6.0 8ffc7b702a Merge pull request #1884 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.11.0 9ab4da418c Remove CVE-2023-6129 from Trivy ignore list 8df30f01e5 Update PostgreSQL and MySQL images to latest versions in configuration files ca4e45addd Update setuptools and sqlalchemy versions in requirements files 3fd3046144 Update Dockerfiles to use new image digests for Debian and Red Hat eb7b9aac75 Remove PostgreSQL 17 warning from documentation regarding Docker integration 4a59ba51bb Refactor database version check and configuration update in scheduler scripts 43b905fee2 Update Dockerfiles to use new base images and remove CVE references 30a0efb7f9 Refactor database connection string validation to improve readability and add recommended drivers for MySQL/MariaDB and PostgreSQL 5599cc8013 Refactor bw_ui_users table migration to conditionally drop columns and set username as primary key 5b53c72078 deps/gha: bump actions/upload-artifact from 4.5.0 to 4.6.0 527fa9d9df deps/gha: bump docker/build-push-action from 6.10.0 to 6.11.0 27ac97828e Add retrieval of database metadata in download-pro-plugins.py 800f7a36b8 Refactor documentation deployment workflow to separate hidden and visible deployments 454adaf0cc Update push doc workflow to edit the version after deploying it 851b0ff806 Fix typo in GitHub Actions workflow for documentation deployment e8461d189d Update logrotate configuration to include Let's Encrypt logs 54fd5f01df Update plugin versions to 1.8 in README and documentation f8452b8f50 Squashed 'src/deps/src/libmaxminddb/' changes from 24df335085..0ff5a5bfb3 8767c0822f Merge commit 'f8452b8f503efa7ad2535a51bc3a449ccd01c4b8' into dev 416289fd09 Update libmaxminddb to version 1.12.1 9fb0475c3d ci/cd - push hidden doc for RC releases 95456ddff9 Enable automatic Let's Encrypt certificate generation in Authelia docker-compose configuration cd39c99102 Fix path in setup-linux.sh to copy configs from the correct directory 77c6df70f6 Refactor test cleanup to use --remove-orphans flag in docker compose commands and streamline bw-data management 7d6a19321b Add ModSecurity rule to remove false positives for LFI attacks in Authelia configuration 455abccb92 Refactor JobScheduler to use schedule.Job type and optimize healthcheck job scheduling logic 6222c0ad4a Add redis-data volume to autoconf.yml for persistent storage in authelia example 67a04f8ba5 Remove obsolete Magento test configuration file b6bde203cf Update dependencies in requirements files to latest versions 1f9393f8d0 Refactor dotenv variable loading to improve readability and error handling; enhance server name validation logic and optimize plugin loading with threading b44492c685 Enhance health check and reload functionality with temporary file indicators and improved timeout handling dfeefc5442 Merge pull request #1867 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.2.1 3316736424 Refactor JobScheduler to manage module paths more efficiently and prevent duplicate entries in sys.path c214c503f8 deps/gha: bump softprops/action-gh-release from 2.2.0 to 2.2.1 675913ae8b [#1659] Refactor server configuration to support multiple HTTP and HTTPS ports with common options for improved flexibility b59afa049b Enhance plugin module execution by validating absolute paths and ensuring module spec creation 054dd85af8 Enable AUTO_LETS_ENCRYPT in Redmine Docker Compose configuration for automatic SSL certificate generation 6fe460d8c2 Refactor environment variable handling in certbot jobs to use cmd_env for improved flexibility 4846000ad4 Refactor theme toggle implementation in JavaScript and HTML for improved clarity and functionality 10a19fc72c Update DockerTest to conditionally set USE_LETS_ENCRYPT_STAGING based on AUTO_LETS_ENCRYPT 7f136757d5 ci/cd - temp rename k8s cluster 854b78669f ci/cd - increase k8s cluster version 7a4f7abe6a Update dependencies: bump setuptools to 75.7.0, update boto3 and botocore to 1.35.93, and upgrade google-api-python-client to 2.157.0 5136b1c8fc Add 'order' column to template settings and custom configs for improved sorting e3d5d5cd51 Add new settings ignored by configuration warnings: RELOAD_MIN_TIMEOUT, DISABLE_CONFIGURATION_TESTING, and OLDPWD adc016b6d8 Monthly mmdb update 2554cf9e42 Update Dockerfile to use Python 3.13-alpine for improved performance and security df2fdffeeb Update pytablewriter to version 1.2.1 and msgspec to version 0.19.0 in requirements files f0021701c0 [#1421] Add support for multiple listening ports in server-stream configuration e5bef59d91 Enhance instance status handling by adding 'failover' state and updating related logic in the database and UI templates 1dc8b6de31 [#1421] Add support for TCP toggle listening in server-stream configuration (now UDP doesn't replace TCP when activated) 5e5130c398 [#1467] Add multi-user support in Auth basic plugin with dynamic user-password handling and update AUTH_BASIC_LOCATION regex to be more open 5c21ecb9dc Add high availability configuration details for BunkerWeb installation 79b53ec15d Refactor conditional logic in postinstall.sh for improved clarity and consistency 4a94680615 Set ownership of Nginx configuration directory to nginx user and group 5a28861b71 Refactor RHEL distribution handling in LinuxTest to streamline package installation and reset PHP module 2451ed4048 Add custom SSL certificate data and priority configuration to setup 3514d5c3f8 Rename "Custom HTTPS certificate" to "Custom SSL certificate" and update related descriptions in plugin.json 11c6f2635d Add custom SSL certificate priority configuration and update related identifiers 0fd01af23c [#1762] Add configurable limit for SecRequestBodyNoFilesLimit in ModSecurity 5155a203f3 Update Redmine and database configurations to use PostgreSQL and version 6 de4366ac1c Update MariaDB image version to 11 in Passbolt configuration files e410eaa255 Add RHEL and RHEL9 specific PHP installation steps in LinuxTest 327933617f Update Drupal version in setup script to 10.4.0 7c941009d7 Fix log truncation command in LinuxTest and update debug failure logging 925bf43fbb Set UI_WIZARD environment variable to 'no' in core test workflow 95c7a16afb Merge pull request #1844 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.207.0 e346f31807 Update workflows and Dockerfiles to support Fedora 40, removing references to Fedora 41 fa05364074 deps/gha: bump ruby/setup-ruby from 1.206.0 to 1.207.0 3e67dbdb8d Update OWASP Core Rule Set to version 4.10.0 and add CVE-2023-5003 to restricted files 04af5fd531 Update Moodle configuration to use MARIADB environment variables d4caf6ac14 Fix path to Nginx executable in configuration check 3c827e2eed Remove unnecessary dependency compression steps from Dockerfiles and post-install script 15fb2f57a9 Add method to retrieve UI users with optional dictionary format 54bb80763b Add job path to Job initialization for better context in logging 2e5b84a566 Update test URLs in tests.json for Tomcat example 77b9957d8b Update Tomcat image version and modify TLS URL in tests.json 38600a0441 Update nginx and nginx-mod-stream dependencies to specific version for Fedora package 56f8d2a591 Add systemctl restart for bunkerweb in LinuxTest 611f4f64a7 Update regex for server name validation in settings.json fc83138d98 Create dummy variables.env file for bunkerweb if it doesn't exist f340999140 Enhance cleanup process in LinuxTest by adding log rotation and truncation for bunkerweb logs 75a8f39670 Update HAProxy configuration to replace 'mybunker' with 'bunkerweb' 141b6aac6a Add return value assignment in JobScheduler after executing plugin module 26d70c1a54 Update KubernetesTest to filter environment variable replacements for DaemonSet of bunkerweb 3645151330 Add CUSTOM_LOG_LEVEL environment variable to KubernetesTest for bunkerweb 6429a0ea70 Update KubernetesTest to replace environment variables for bunkerweb a10e9cd7f8 Add additional volume mounts for bunkerweb with appropriate permissions dbf398a01c Update Dockerfiles to create and set permissions for /data/www and /var/www/html directories 1d022fbe45 Enhance Job and JobScheduler classes with unique environment handling and improved initialization c4cce2a1ac Update Docker images in configuration files to use 'php:fpm' instead of 'php:fpm-alpine3.19' fa370f39b3 Refactor Docker and Swarm controllers to improve container and service retrieval with enhanced error handling and namespace filtering de54a88693 Replace 'docker-compose' with 'docker compose' in test scripts for consistency with updated Docker CLI commands db160b106a Merge pull request #1828 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.206.0 32660382b4 Fix file paths in letsencrypt.lua for certificate retrieval e36755841d Refactor Job class initialization to include plugin_id and improve job path validation 310e044e28 deps/gha: bump ruby/setup-ruby from 1.205.0 to 1.206.0 c2c52f5f71 Update letsencrypt.lua to include LETS_ENCRYPT_CHALLENGE check for wildcard usage 342164da38 Refactor import statement in certbot-new.py to use letsencrypt module for improved clarity eda8a10ce6 Refactor domain handling in certbot-new.py to streamline input processing and ensure consistent lowercasing of server names 4ca6bd53e8 Enhance domain handling in certbot-new.py to support both string and set inputs for domains 12c3275303 Remove redundant paths from sys.path management in bunkernet jobs b27ed6f94d Improve dynamic module import in JobScheduler to manage sys.path more safely 08cba813c6 chmod +x all examples scripts 6d1a271a03 Import dump function from yaml in DockerTest.py 6fc4b52653 Refactor environment variable handling in AutoconfTest, DockerTest, and SwarmTest to use dictionary assignment and add CUSTOM_LOG_LEVEL 59f5b2e65d Update KubernetesTest to exclude IngressClass from environment variable replacement 65cacf5412 Update test configurations to use 'bw-scheduler' service and adjust environment variables 32f6db39af Merge pull request #1816 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.205.0 33d6247eb0 Update GitHub Actions workflow to ensure test script is executable before running fb29640330 deps/gha: bump ruby/setup-ruby from 1.204.0 to 1.205.0 f074f9f709 Refactor GitHub Actions workflow by removing redundant test preparation jobs 4b2a853318 Refactor database configuration update and migration logic in scheduler scripts 8d2a95b696 Merge pull request #1811 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-37cdac4 b549a28965 Merge pull request #1810 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-38791b2 9f575d0e35 Merge pull request #1807 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-d3f4492 12b49adf23 Merge pull request #1806 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-5e1b956 f405963170 Merge pull request #1802 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.28.0 32b6df02fc Update Dockerfile to use Python 3.12 and ensure pip installation for dependencies 586beda91c Refactor JobScheduler to improve environment handling and plugin execution d46605bf18 Refactor database URI handling and improve error messages in scheduler scripts d4603b91f2 Fix template configuration retrieval and streamline plugin base definition in Database class 511e79aae8 Enhance plugin download functionality by adding file type detection and improving error handling for ZIP and TAR extraction 0924671330 Add IP address and User-Agent to session if missing 49084d6561 Refactor JobScheduler to improve environment handling by ensuring job modules receive a copy of the environment and updating the environment consistently across job execution. b5079b7fac Implement retry logic for Kubernetes event streaming and enhance error handling in IngressController 2cbe2521f3 Add GitHub Actions workflow for automatic release candidate builds and deployments d0be0fc2e0 Add core/letsencrypt/jobs to Python path in certbot-new.py b26cee1917 Update dependencies: bump jinja2 to 3.1.5, click to 8.1.8, boto3 and botocore to 1.35.86, and add aiofiles to requirements c68cd5ef23 Enhance job handling and cache permission management in JobScheduler 671719f97e Fix pro_expire date formatting check to ensure proper type validation a0a9f0c03e deps/linux: bump redhat/ubi8 from `7287624` to `37cdac4` in /src/linux 562f0d2a76 deps/linux: bump redhat/ubi9 from `aa149a2` to `38791b2` in /src/linux 0445bab728 deps/tests/linux: bump redhat/ubi8-init in /tests/linux 7f8a7fe213 deps/tests/linux: bump redhat/ubi9-init in /tests/linux 19a557de14 deps/gha: bump github/codeql-action from 3.27.9 to 3.28.0 3ed414346f Merge pull request #1798 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-71551c0 29824fa003 Merge pull request #1795 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-aa149a2 41c4bed776 Merge pull request #1793 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-7287624 5c73350d09 Merge pull request #1786 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-c586b14 33dc1ad2a4 Merge branch 'dev' of https://github.com/bunkerity/bunkerweb into dev 1a974dbe57 feat: update base images in Dockerfiles to latest versions for improved stability eafabf8819 Merge pull request #1791 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.9 510419ceff Merge pull request #1799 from bunkerity/dependabot/github_actions/dev/actions/upload-artifact-4.5.0 5e9db69214 Merge pull request #1797 from bunkerity/dependabot/github_actions/dev/docker/setup-buildx-action-3.8.0 99cb8d23ab Merge pull request #1796 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.204.0 b5556665ab Merge pull request #1789 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.2.0 6a1644fe97 chore: update changelog for v1.6.0-rc1 with bugfixes, features, and deprecations 28b33f3162 chore: update package versions in requirements files bc93b61bf3 feat: update Dockerfile version label to 1.6.0-rc1 4bb616e1c4 feat: add Permissions-Policy header to enhance security controls 328caa229e feat: enhance Content Security Policy and add additional security headers bf676b32dd feat: enhance random number generation for secure randomness in utils ac81936f9d feat: remove X-XSS-Protection header and related configuration from plugin 1092ea0e00 feat: update Docker images to version 1.6.0-rc1 in example configurations b3e273dd9a feat: update version to 1.6.0-rc1 across project files and Docker configurations 9bc64d515d Start work on easy migration from one version to another using alembic 1983b41fee deps/gha: bump actions/upload-artifact from 4.4.3 to 4.5.0 982213bbcf deps/tests/linux: bump redhat/ubi9-init in /tests/linux 699c5cc616 deps/gha: bump docker/setup-buildx-action from 3.7.1 to 3.8.0 f36ba4245a deps/gha: bump ruby/setup-ruby from 1.202.0 to 1.204.0 85d1090198 deps/linux: bump redhat/ubi9 from `1057dab` to `aa149a2` in /src/linux 07698c186e deps/linux: bump redhat/ubi8 from `79d46e7` to `7287624` in /src/linux 72d74ece41 deps/gha: bump github/codeql-action from 3.27.5 to 3.27.9 c151b844cb deps/gha: bump softprops/action-gh-release from 2.1.0 to 2.2.0 6175627fda deps/tests/linux: bump redhat/ubi8-init in /tests/linux b97257c7c3 [#1766] feat: enhance IngressController to support configurable service protocol 756daea931 feat: add country tracking to ban management; update templates and scripts for country display 56432f62c4 fix: disable strict SSL for CSRF protection in the application configuration cacab54225 feat: add health check endpoint and integrate it into the scheduler for instance status monitoring 12beb00e17 fix: improve entrypoint script to capture and log exit code of the main Gunicorn process 6e2f54e6a2 feat: enhance password validation regex to require special characters; update related templates and scripts 4e55b2f61c fix: update volume paths in dev Docker Compose files to use the utils directory 1df26cee65 chore: update dependencies for six, pydantic, boto3, botocore, and protobuf f397200535 fix: ensure proper exit code handling in scheduler entrypoint script f56524a35d feat: add temporary UI service with logging and session management; update dependencies and Dockerfile 10c9f29f13 feat: enhance URL validation and sanitization in loading page; improve file extraction safety in plugins bad9c3cc5e refactor: move watch type handling inside the loop for improved clarity a7f632dab0 feat: improve SSL handling and logging in IngressController 6be20b6189 feat: enhance logging by removing sensitive information and cleaning up debug messages 996299893b Monthly mmdb update 17ee5443ea feat: add reverse proxy URL handling in setup and update UI templates a8b064cfd2 feat: remove deprecated Docker Compose example for killercoda 3e071c856f feat: update button color for selected rows in dark style table d5bb9f913c feat: implement ALWAYS_REMEMBER functionality for session persistence in login 35d61bb898 feat: enable partitioned session cookies for enhanced security 7c71fe32f0 fix: update regex for cookie flags validation to allow additional attributes 114175a5d1 feat: update killercoda example Docker Compose 4aa87794fa feat: add CHECK_PRIVATE_IP environment variable to killercoda example's Docker Compose 12b88c4541 feat: add custom configuration to increase server names hash bucket size in Docker Compose d3c04cca3a fix: increase string length for service_id and id columns in database models 880b5431c9 fix: update regex for server name validation to be more open 94307cb3ad feat: add CHECK_PRIVATE_IP configuration to manage session IP address changes for private networks 59d88bcccd fix: remove unnecessary logger initialization in ReverseProxied and enhance IP address validation in session checks c2b21660c6 feat: add logging to ReverseProxied middleware for debugging 3d8bdd22b9 feat: add USE_REAL_IP and REAL_IP_FROM settings to Docker Compose example f60895af73 feat: add killercoda Docker Compose example a41c9c0380 feat: add reset button for template settings in plugins settings UI efde5fa049 fix: format recovery code display in profile template 2fdbff85a9 fix: convert user creation and update dates to timezone-aware datetime a661d16c38 fix: remove GENERATE_SELF_SIGNED_SSL setting from UI templates e1f14bc8a1 feat: add SECURITY_MODE setting to security templates a26a9138ca Merge pull request #1772 from bunkerity/dependabot/docker/tests/linux/dev/ubuntu-80dd3c3 3aa26256cd Merge branches 'dev' and 'dev' of https://github.com/bunkerity/bunkerweb into dev 013206ce88 fix: update Dockerfile to use a specific sha256 digest for redhat/ubi8-init image 03d1c5a96c Merge pull request #1770 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-79d46e7 ffc41a95cc deps/tests/linux: bump ubuntu in /tests/linux 54ede8177c Merge pull request #1769 from bunkerity/dependabot/docker/src/linux/dev/ubuntu-80dd3c3 c4a72ad7c5 Merge pull request #1765 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-1057dab f5525d3b51 Merge pull request #1764 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-2624d48 de20b1b04a Merge pull request #1760 from aizatto/patch-2 acf5443920 fix: simplify draft settings logic in plugins settings initialization b2165f09c8 fix: update template handling to change default from 'high' to 'low' and adjust related logic in database queries and UI 3af012b341 fix: adjust admin age check to use local timezone to avoid comparison of offset-naive and offset-aware datetimes 59c70b51e6 fix: change default template value from 'high' to 'low' in services page b6ee15a66b fix: update regex for server name validation to escape hyphens eca4fb3326 feat: add LIMIT_CONN_MAX_HTTP3 configuration to connection limits in JSON templates baba613dec fix: update DNSBL_LIST to remove deprecated entries and improve formatting db0ed2a512 deps/linux: bump redhat/ubi8 from `d497966` to `79d46e7` in /src/linux b69841db23 deps/linux: bump ubuntu from `278628f` to `80dd3c3` in /src/linux 8685281248 chore: update dependencies to latest versions in requirements files bff7ff6dc6 chore: update coreruleset to version 4.9.0 and enhance documentation b7f3974fe8 fix: use serverSide processing for reports 818270384c feat: add configuration testing option for Nginx reload endpoint 53d6114fc1 fix: add deprecation warning for Swarm integration in SwarmController 19de0e1e9d fix: update mode checks in postinstall script for bunkerweb, scheduler, and UI f7785536c9 fix: enhance service management logic for bunkerweb, scheduler, and UI with clearer status messages d7bd9f835f deps/linux: bump redhat/ubi9 from `2bae906` to `1057dab` in /src/linux 7496cb0e47 deps/tests/linux: bump redhat/ubi9-init in /tests/linux 7619846e9c fix: add checks for active services before reloading or restarting bunkerweb and scheduler 9f5ed53b99 docs: update title for bunkerweb-plugins/webhook 3e5e269d33 fix: add 'tar' dependency to package configurations for various Linux distributions 723b894a08 fix: update log message for restarting bunkerweb-scheduler service in postinstall script cfb9434cb1 fix: add logic to disable bunkerweb and related services during postinstall b69cd8aeda fix: ensure ignored directories are correctly tracked during job cache restoration a9792cb047 fix: improve bunkerweb service management in postinstall script 5236e3e329 feat: add BunkerWeb Scheduler service and update backup scripts for scheduler environment d614dad821 fix: enhance ui.env creation with additional environment variables and permissions 6f1c597038 fix: refactor logging configuration to use constants for format and date format 0bfb9211cb fix: update file permissions for database and cache management d7cef06095 fix: update UI Dockerfile version label to 1.6.0-beta b5316a151f fix: handle ArgumentError in plugin command parsing and improve debug logging b52476900d fix: update CHANGELOG for v1.5.12 02dc9aef49 fix: enhance web UI configuration with new environment variables for listening address, port, and worker settings 734b4cc492 fix: update ModSecurity rules in ui.conf to enhance security and logging 026e63b58f fix: add critical logging for invalid SERVER_NAME in Configurator 8128fb59b2 fix: update IngressController to improve service port handling 1c1bb12259 Merge pull request #1754 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.10.0 fd75cdefc0 deps/gha: bump docker/build-push-action from 6.9.0 to 6.10.0 8b55f9f303 fix: enhance changelog extraction in GitHub workflow to preserve formatting 9b896be394 fix: add installation of Python requirements in Dockerfile d7ef17eb27 fix: add support for 'plugin' command in CLI 5b759e8fe6 Update db diagram 621523ea6a fix: enhance afterRemoveDEB.sh and afterRemoveRPM.sh for improved service management and cleanup ed2c5da2d5 fix: remove unnecessary __init__.py creation from Dockerfiles and update gunicorn worker class to gthread d6fff9acff fix: update gunicorn to use gthread and bump boto3 and botocore versions for compatibility 12c4c12568 fix: add shield emoji to post-installation message for enhanced user experience 719eff3827 fix: simplify beforeInstall.sh by removing OS checks and focusing on nginx backup 65040dec6f fix: ensure __init__.py exists for zope to avoid import failures d5b6fe6c03 fix: update troubleshooting and web UI documentation for clarity and accuracy in user management instructions 38c3a6751f fix: simplify Flask secret handling by removing length validation and using a constant length for generated secrets 3fe723cda2 fix: remove TOTP_SECRETS environment variable from dev Docker Compose files afa22f627c fix: streamline secret loading by checking for files in LIB_DIR and removing redundant environment variable handling 69b59ef68e fix: update recovery code display to adapt background color based on theme ac104b223c fix: update documentation to format setup wizard instructions as examples 05338fbee2 fix: clean up changelog content processing in GitHub Actions workflow 571aed1f0c fix: enhance metrics logging by adding request ID and add Redis requests handling b9879419af fix: update HTTP3 configuration to include TLSv1.3 checks and streamline rule removals eee1e191e0 fix: optimize IP key handling and enable decode responses for Redis client 82a98317ea fix: update package versions in requirements files for consistency and compatibility e2d90a1bf8 fix: enhance logging and fix ingress class filtering logic in IngressController 7fcaf68fbb fix: update upgrade instructions to correct step numbering and improve clarity 687806f4d9 fix: update regex in headers.lua to capture all characters after the colon 7f7c6ebdc2 fix: refine provider checks for DNS and HTTP challenges in certbot-new.py 7b9e990349 fix: update HTTP3 configuration to disable it when proxy protocol is in use 220732b74f fix: fix Open Redirect Vulnerability in Loading Page + fix shenanigans with setup wizard cf64ad4a16 fix: enhance CORS validation to support AJAX requests d1d77207b7 fix: update regex for server name validation in settings.json c339a43d0c k8s - fix missing namespace in pod hostname 6bbbbac224 k8s - fix hostnames, add KUBERNETES_DOMAIN_NAME and fix service with name only 8b7ff00ffd fix: streamline UI startup command by using sudo for nginx user execution 37249a11cf chore: update package versions in requirements files 1bfe6a6f69 Merge pull request #1737 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.5 da4f65df4f fix: add patch script validation and execution for Core Rule Set (CRS) nightly jobs 57fa77726b fix: update default preference for column 10 to true in reports dataTables in web UI 76c72029da refactor: update theme handling in templates and enhance SSL configuration logic af3d7b0fa4 Fix shenanigans with cloned services using the autoconf method cd5c5821b8 fix: Ignore services not using let's encrypt c3354cf27d refactor: update file permission commands in Dockerfiles to exclude modsecurity files d9068c22de refactor: remove debug logging of SQLAlchemy connection string in Database class 3825b38fd8 refactor: move debug logging setup to the command execution block in CLI cf8671655c Merge branch 'dev' of github.com:bunkerity/bunkerweb into dev f4974fbb9a modsecurity - retrieve matched rules 3b8ab7c964 refactor: move debounce function to common.js and clean up usage across scripts cb62f550ec feat: add persistent column preferences in database 66ac7c72b0 deps/gha: bump github/codeql-action from 3.27.4 to 3.27.5 313edb4df3 fix: fix alias validation in LE DNS models 82deac2ef9 fix: remove unused certs volume from DNS examples in Docker Compose files f07d7a6ca7 feat: Add examples for major DNS providers 6d90307bf9 feat: replace custom ModSecurity configuration with CRS plugin URL for Nextcloud examples 1d7182a48d feat: replace custom ModSecurity configuration with CRS plugin URL for WordPress examples 97f9da0c87 feat: update Drupal examples to include MODSECURITY CRS plugin URL and specify TCP/UDP protocols in Docker Compose 02ae9aa12e fix: specify TCP and UDP protocols for port mappings in examples Docker Compose files 52fb19e45d feat: add validation aliases for DNS provider API tokens and keys 792e7551c8 Merge pull request #1732 from bunkerity/dependabot/github_actions/dev/docker/metadata-action-5.6.1 4f313e0fd6 Merge pull request #1731 from bunkerity/dependabot/github_actions/dev/aquasecurity/trivy-action-0.29.0 0f930e66aa fix: add DATABASE_URI to environment variables in CLI command execution 3d7648dac0 fix: add debug logging for SQLAlchemy connection string in Database class f4a04e2780 feat: enhance BunkerWeb installation scripts and Dockerfiles a73c8083f3 Merge pull request #1735 from aptkzzz/dev e8fd630c1c chore: remove documentation and GitHub workflows for coreruleset v3 and v4 774c1a697e fix: ensure UI is stopped before starting in bunkerweb-ui script ac2c5de1da fix: rename environment variable for UI template usage in configuration files d15d750cb5 fix: update environment variable name for custom CA in Kubernetes API documentation 2bc76e4764 backup /etc/nginx folder before install 61ba790c7b deps/gha: bump docker/metadata-action from 5.5.1 to 5.6.1 bd8ccbb722 deps/gha: bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 db181b546e Merge pull request #1729 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-8.10-9.1731462872 fdf8379e83 Merge pull request #1726 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-d497966 d2578d31ea fix: update regex for server name validation to respect RFC1035 9f737f9fec fix: enhance condition checks in Configurator for variable handling d218f610c5 feat: implement column visibility management for reports, cache, jobs, and instances tables with localStorage support 2135ef8769 refactor: format JSON and Lua files for improved readability and consistency 53ac7975a6 fix: use right function to get the security mode in limit plugin d809f2f8a0 fix: update get_reason function to correctly retrieve security mode from context a5ef0d23eb refactor: improve data handling in whitelist, greylist, and blacklist initialization + enhance logging for loaded entries 2e2639e467 refactor: enhance real IP configuration handling for multisite support and improve file reading logic + fix download logics with global variables 8a66783ff4 fix: update current_time calculation to use local timezone in cache validation 750587fe2d refactor: simplify service_id handling in database queries 8b77cd39e9 deps/tests/linux: bump redhat/ubi8-init in /tests/linux 98d7b2cd9f deps/linux: bump redhat/ubi8 from `8990388` to `d497966` in /src/linux ca7f2a25ba fix: update package versions in requirements files for compatibility and security 43841ca5a9 Merge pull request #1724 from bunkerity/dependabot/docker/src/linux/dev/ubuntu-278628f 0f7944b4ab Merge pull request #1721 from bunkerity/dependabot/docker/tests/linux/dev/ubuntu-278628f c6fe29fe53 fix: update Dockerfiles to address CVEs by adding required PostgreSQL client libraries 2dbd99a181 feat: standardize whitespace in conditional statements across configuration files 9806f0fc72 fix: add keep_trailing_newline option to FileSystemLoader in Templator 6b233f7774 fix: two variables had the same name but different purposes in realip-download.py 5e10b066ca feat: add REMOTE_PHP_PORT setting to configure remote PHP-FPM port 80250fdd13 fix: update regex for reverse scan ports to enforce valid port ranges 0a29cff031 fix: update regex for HTTP3 Alt-Svc port to only allow valid ports e648db58c5 fix: update regex for cookie flags to allow empty values ee635c36a6 ui: enhance table responsiveness and add tooltips for better accessibility 53e1e4189b ui: Update DOMPurify to version 3.2.0 927ca6a110 ui: Update ace editor to version v1.36.5 cea64f0ad6 fix: adjust minimum settings requirement for non-draft forms 6f96113a9a deps/linux: bump ubuntu from `99c3519` to `278628f` in /src/linux fe913dc03a deps/tests/linux: bump ubuntu in /tests/linux a94d7c7a97 docs: update wildcard certificate documentation to clarify DNS challenge requirement a1f42dd944 feat: enhance Let's Encrypt challenge handling for wildcard certificates 7e83f180c1 Start adding documentation about SECURITY_MODE 99f1190dfd fix: update Dockerfiles to use --force-reinstall for pip installations 46c61a5667 feat: enhance reports filtering and update DataTable column visibility 51e658cd3e bw - improve security mode feature 14a0b7dc1c bw - init work on detect only mode 826631291f fix: remove unsupported letsencrypt_dns plugin and clean up related data handling 23b7ef6ee1 fix: enhance get_ui_roles method to handle exceptions and return error messages c3c5826f64 cleanup: remove deprecated Dependabot configurations for various ecosystems 6411413452 Merge pull request #1710 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-9.5 1e8b96be7e Merge pull request #1711 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-9.5 f81392b0fe Merge pull request #1719 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.4 bc32128280 Merge pull request #1698 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.1.0 196b8de3cc Merge pull request #1687 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.202.0 283ba79ed4 deps/gha: bump github/codeql-action from 3.27.0 to 3.27.4 d7f9a5473f Refactor templates and routes for improved configuration handling and UI consistency 8c926d2132 Fix filtered_settings argument to use tuple syntax in database queries 9fa8ab5483 Add Let's Encrypt configuration options to template files 8440bfbd87 Add DATABASE_RETRY_TIMEOUT to Configurator class configuration options 73554d994a Remove deprecated DNSBL server from default list in plugin configuration 216930e74d deps/linux: bump redhat/ubi9 from 9.4 to 9.5 in /src/linux 1c314fb1d0 deps/tests/linux: bump redhat/ubi9-init in /tests/linux 68d2c78ee6 Change log level from error to warning when no server names are provided in letsencrypt plugin's jobs 1052e1564a ui - refactor theme handling in templates to use a unified 'theme' variable and move upgrade to pro button d107dd4223 Merge commit 'ae0e60ad387c118ac75a079208d52a443bed4502' into dev ae0e60ad38 Squashed 'src/deps/src/luajit/' changes from 33d6b04681..098183d9d2 234c7436aa Update LuaJIT version to v2.1-20241113 in dependencies bae9cb13d9 ui - enhance setup configuration for Let's Encrypt options 52a3814728 ui - update redirect logic to exclude /.well-known paths 4f4cc755ef ui - update Python base image to 3.13-alpine for Dockerfiles deed0e6dd1 ui - remove redundant redirect from root to /setup 0af8eae0a3 ui - redirect to /setup (again) d020c90280 ui - fix typo in setup config 9116008736 ui - redirect setup wizard to /setup ea09e8b72e ui - fixe couille dans le potage with setup wizard on firefox a0996041d4 Refactor CSS transitions for smoother effects and update HTML to support dynamic theme attributes c6d5061cd4 Suppress SQLAlchemy warnings for DELETE statements in Database.py 444961ec99 Update docs about let's encrypt 6d46635a5e Update dependencies and add Let's Encrypt DNS challenges support 7d473beefa Add autocomplete attribute for password input fields in input_setting.html b0006a6c94 Update regex pattern for cookie flags in plugin.json for improved validation f4cf510d13 deps/gha: bump softprops/action-gh-release from 2.0.9 to 2.1.0 7e8f1ef25d init work on letsencrypt_dns core plugin b11769116f deps/gha: bump ruby/setup-ruby from 1.201.0 to 1.202.0 c93759541b Fix id issue with inject plugin 4ff678037a Update dependency versions for nginx in fpm configuration files to allow version range eae5439861 Add support for injecting HTML before the </head> tag in inject plugin d90b980cc6 Update regex patterns in plugin.json for improved validation 8de3c5a2a0 Update Dockerfiles to address CVEs and improve dependency versions fe2a37743b Update dependency versions in requirements files for improved compatibility 4a63e72af0 Merge pull request #1648 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-2.0.9 8dd0cdd5a2 Merge pull request #1668 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-8.10-9 df13c9bff9 Merge pull request #1671 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-8990388 4c42dcf7a1 Merge pull request #1674 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.201.0 fa2079a4b4 Update button alignment in templates to use 'justify-content-evenly' for improved layout consistency 9c9ce5a55d Refactor theme handling in login page to prioritize saved preferences from localStorage before falling back to system color scheme 175cc70b70 Add theme handling in setup and login processes, enhance UI theme toggle functionality d598cb4276 Add mode selection handling in global config and update templates for improved UI 25c3b13167 Add export functionality for services and enhance variable handling in service page ebbfc6418d Enhance action button tooltip behavior and add export functionality for services a17bc069c1 deps/gha: Bump ruby/setup-ruby from 1.197.0 to 1.201.0 188f58b3ce Add check for non-empty servers before setting SERVER_NAME in config f093202a7b Set default theme to 'light' for AnonymousUser model f05acb2080 Set default theme to 'light' in base template if not specified 33d07aef64 Add Enter key functionality to save plugin settings and fix condition for minimum settings check 89a827f2a8 deps/linux: Bump redhat/ubi8 from `a965f33` to `8990388` in /src/linux 7a8cfedb08 deps/tests/linux: Bump redhat/ubi8-init in /tests/linux 325bd51dc9 Fix infinite /setup loop in web UI when upgrading from 1.5.X f39d32a6e5 Run plugin download jobs in parallel for improved performance 9f6307afe0 Monthly mmdb update 7c7a67ab65 Enhance backup functionality with forced backup option and version change handling c03c1b5406 Add TRIVY_DB_REPOSITORY environment variable to container build workflow 45ffdf4f06 Update support for Fedora to version 41 and drop support for version 40 across workflows, Dockerfiles, and documentation e99e674e59 Update nginx dependency to exact version for RHEL package configurations ba0a2c6643 Fix typo in post-installation message for consistency 6e27f4bf00 Update CHANGELOG.md file 983adf64a1 Add the possibility to run plugins job in async mode to avoid running them in order in the scheduler by setting the `async` key to `true` in the plugin job configuration (default is `false`) a7828e04d2 Add PGDATA environment variable to PostgreSQL configuration files for data directory management 29993335b8 Add PostgreSQL client and libpq to Dockerfiles to address CVE-2024-7348 6a7d3ebc34 Remove redundant autoconf instance clearing logic in save_config.py for improved clarity 6094d779bd Refactor save_config.py and main.py to utilize dotenv for environment variable management and improve path handling 3117ab5a8b Refactor logger setup in save_config.py for improved clarity and add warning for autoconf instance clearing c97332e864 Refactor blacklist, greylist, realip, and whitelist download scripts to improve cache cleanup logic and enhance logging messages ccba2f12ee Fix typos in post-install script messages for clarity 268307d84d deps/gha: Bump softprops/action-gh-release from 2.0.8 to 2.0.9 ef508c319c Standardize environment variable assignment in Dockerfiles for consistency 8a1c32af51 Enhance post-install script with setup wizard activation message and additional resources bff790e0a0 Add reverse wizard logic where the wizard is activated by default and USE_WIZARD=no has to be set to deactivate it when installing a Linux integration f15b5eea61 Update error printing to keep only what's necessary in jobs 41540fcda2 Handle no longer used urls in list downloads jobs 1c3fea7f09 Refactor realip and greylist download scripts to improve caching logic and reduce unnecessary downloads aaa7aa2fb8 Merge pull request #1635 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-9.4-14.1729775103 8ab846bf49 Merge pull request #1630 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-ee0b908 7db2dadf7f Refactor send_file_to_bunkerweb function to improve instance status handling and simplify control flow 804937207a Refactor Dockerfile to streamline file copying and improve directory structure 23b29f027b Add requirements file for generation dependencies in autoconf Dockerfile 99ce9caa12 Refactor CLI.py to update dependency paths and reorder imports e1196ffbc9 Update ApexCharts web UI lib to v4.0.0 f31dd2bf46 Add fallback API instance for CLI when database is unavailable a5ed94c835 Update Core Rule Set v3 to version v3.3.7 bcd3ff63eb Refactor setup_page() function to include USE_UI configuration option 806f2632f2 Update Core Rule Set v4 to v4.8.0 5819cebd61 Fix upgrade procedures commands 08167b70b5 Refactor database code to remove unused UI version field c1fe1a5483 Fix shenanigans with separated model by joining them into one b71cf63cb0 Add warning about PostgreSQL 17 not supported in Docker integration f6c343b547 Finish dark mode in web UI (awaiting review) c9c479b04f k8s - init work on custom CA and ingress class d20f926078 Start adding dark mode in best effort for web UI 3ead15cdd1 Refactor toast styling and add border to feedback toast 56dd0f069c Add custom cert to setup wizard + Make it possible to edit some settings when the service is created using the wizard aa46ba62d2 Fix upgrade issues from 1.5 to 1.6 892ca65552 Refactor backup UI actions and update cache file 5f8bc4ec82 autoconf - add KUBERNETES_VERIFY_SSL env var e60c5a8253 deps/tests/linux: Bump redhat/ubi9-init in /tests/linux 450b1c0b3d deps/linux: Bump redhat/ubi9 from `b00d599` to `ee0b908` in /src/linux 8925e5c71c linux - fix python3-devel package name dependency for RHEL9 e3c968e8ae linux - add missing dependency for rhel9 aarch64* 9cec9ff762 ci/cd - temp disable arm build for beta release cdf47c9613 ci/cd - fix push docker images steps 3ebc9a2ee4 ci/cd - remove unused secrets in beta wf 0dd1f53fb8 Update templates 71e70a0728 Refactor template configuration reset function when changing template in easy mode ed90073ff7 Update python deps 7032edd9f5 Make it so that _URLS settings are now multisite 6d342abce9 Add a lot of QOL in web UI a01b0a26a5 Merge pull request #1616 from bunkerity/dependabot/github_actions/dev/actions/checkout-4.2.2 e4cb4049e2 deps/gha: Bump actions/checkout from 4.2.1 to 4.2.2 e568c3efd6 Merge pull request #1610 from bunkerity/dependabot/github_actions/dev/actions/upload-artifact-4.4.3 b8b8f8e12e Merge pull request #1609 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.27.0 815558ee67 Merge pull request #1622 from bunkerity/dependabot/github_actions/dev/actions/setup-node-4.1.0 d5f8acfc8f Merge pull request #1623 from bunkerity/dependabot/github_actions/dev/actions/setup-python-5.3.0 461de8a98a Refactor get_config method to handle first run flag 196c1a458a Refactor plugin page rendering to handle old templates gracefully 788ccb1d3a Finish migrating old core plugins' UI pages to new way of doing it 366e5d7c1c Refactor CSS transitions in overrides.css for smoother user experience 4205aa6543 Refactor sorting order in services.js to use the first column ab76d6074f Refactor UIData load_from_file method to handle empty data 4badcdd917 deps/gha: Bump actions/setup-python from 5.2.0 to 5.3.0 0bcead3cce deps/gha: Bump actions/setup-node from 4.0.4 to 4.1.0 9c67ee143c Start migrating core plugins' pages to the new format 3058a629bf Refactor modsec ui.conf to remove specific SecRule by ID 7b5eac44b3 Fix JobScheduler to run jobs in plugins's order 6e43766e23 Refactor Config class to ignore non-editable variables managed by specific methods 8cf603526d Refactor JobScheduler reload method to use custom timeout 61f8b834eb Refactor Database.py to simplify service setting handling b73861db5e Change background of login/loading/setup/totp pages in web UI 2bcf8c57da Add documentation about the Scheduler's built-in healthcheck system 4abb20b6e7 [#1525] Add the possibility to defined a custom timeout to api calls and set a linear one depending on the number of services upon reload caaff13678 Refactor plugin_page.html to improve card title and subtitle styling f29095a555 Add "service" field in bans when sending it to the API from bwcli 0d6fdbdd18 [#1460] Add "service" field in bans and reports 609dfc3cdc Update flag icons and optimize date conversions + Add auto refresh buttons to reports page in web UI e4c17ec988 Refactor service conversion message to include the converted service type a5f02a1a2d deps/gha: Bump actions/upload-artifact from 4.4.0 to 4.4.3 e343e5077c deps/gha: Bump github/codeql-action from 3.26.13 to 3.27.0 3a6caf1644 Optimize and made some tweaks for QOL reasons in web UI 5529f312c1 Update Python base image to version 3.13.0-alpine 2c7669a589 Update Python base image to version 3.13.0-alpine 1bb6dbc824 Merge pull request #1601 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.197.0 fcd5dfab1b deps/gha: Bump ruby/setup-ruby from 1.194.0 to 1.197.0 bd46dcf094 Merge pull request #1594 from bunkerity/dependabot/github_actions/dev/aquasecurity/trivy-action-0.28.0 2d21ed16bc Merge pull request #1591 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.26.13 1263cfa838 Merge pull request #1569 from bunkerity/dependabot/github_actions/dev/actions/checkout-4.2.1 ba5fab1a1f Merge pull request #1560 from bunkerity/dependabot/github_actions/dev/docker/setup-buildx-action-3.7.1 980623ce76 Update ace web UI lib to version v1.36.3 061fbe45e5 Update apexcharts web UI lib to version v3.54.1 56ffc1b290 Add some QOL tweaks discussed in an early reunion to web UI 793bef233b Merge commit 'a9b812744dfe7270938fff18b278271cf508f8c2' into dev a9b812744d Squashed 'src/deps/src/mbedtls/' changes from 71c569d44b..107ea89daa 51038ce009 Merge commit '379de6ab05e53da9603c279b6147e06ea3ca4a1c' into dev 379de6ab05 Squashed 'src/deps/src/lua-resty-lrucache/' changes from 129314760..3ff6300e6 96dbc4be23 Merge commit '85f860ffc79f6ef6f744ad595c0de0210de5e3ce' into dev 85f860ffc7 Squashed 'src/deps/src/lua-resty-core/' changes from fa3cd7aec..2da3d7719 401f9c9b87 Updated lua-resty-core version to v0.1.30, lua-resty-lrucache version to v0.15, Mbed TLS version to v3.6.2 4f107a9b54 Update python deps e57f825ba5 Tweak a few things in the web UI 34c2210cde deps/gha: Bump aquasecurity/trivy-action from 0.24.0 to 0.28.0 fbd44826dd deps/gha: Bump github/codeql-action from 3.26.10 to 3.26.13 7183d33fe2 deps/gha: Bump actions/checkout from 4.1.7 to 4.2.1 e7cc450af9 Start preparing the field for plugin pages in web UI b2f9fab7ad Run pre-commit-config and apply it + update it c73e9bf161 Refactor datatable filtering options in web UI 756af7becb Refactor datatable filtering options in web UI 98c4aafa14 Fix configs edits when they are from templates 4dc9c4a6cd Made a few tweaks about fonts and added more options for filtering for datatables in web UI 4d3d3dc0c1 Update apexcharts lib to latest version in web UI bcb5321583 Add Don José and Courier Prime fonts + Fix shenanigans with setup wizard in web UI + Add lottie to loading screens 3049047a20 Fix config saving logic with template variables and global values 65ae43d626 Monthly mmdb update c5fcb9d4b7 deps/gha: Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 15b473ba26 Add about page and start adding pro page to web UI 0bf3af7089 Tweak setup wizard to enhance whole process f8827f31ea Lint HTML file with djlint 91637a9e21 Use NGINX mode in all editors while ModSecurity highlighting syntaxes aren't available 7fc869a8ba Tweak REVERSE_PROXY_INCLUDES regex to be less restrictive 49c12e71b2 Add fallback to local mmdb file if the download.db-ip.com domain isn't reachable bf873339e7 Soft merge branch '1.5' into dev 28a3d30cef Add documentation for new WORKERLOCK_MEMORY_SIZE setting 7b297ced63 Merge pull request #1521 from PathToLife/master 53b4c8d0aa Fix regex pattern for intercepted error codes in plugin.json 782ae973c7 Fix regex pattern for intercepted error codes in plugin.json 8b600d1891 Update psycopg version in requirements 82d9d09779 Update psycopg version to 3.2.3 in requirements files 8306f9c098 Update durationpy to version 0.8 40bb729d8c Update Python base image in Dockerfiles b9fa48f2bc Update dependencies for UI, core, scheduler, and documentation e1d8611969 Merge pull request #1541 from bunkerity/dependabot/github_actions/1.5/docker/build-push-action-6.9.0 2ca69dabb4 Merge pull request #1540 from bunkerity/dependabot/github_actions/1.5/github/codeql-action-3.26.10 803ea066c1 Merge pull request #1539 from bunkerity/dependabot/github_actions/1.5/ruby/setup-ruby-1.194.0 97a18b6101 Merge pull request #1535 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.26.10 d3411630c7 Merge pull request #1534 from bunkerity/dependabot/github_actions/dev/docker/build-push-action-6.9.0 3d316cb9d9 Merge pull request #1519 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi8-init-8.10-7 0688a5b931 Merge pull request #1516 from bunkerity/dependabot/docker/tests/linux/1.5/redhat/ubi9-init-9.4-14.1726695630 5b936b8ed0 Merge pull request #1518 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi8-a965f33 20387a6ba5 Merge pull request #1523 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.194.0 35df6e8175 Merge pull request #1522 from bunkerity/dependabot/github_actions/dev/actions/checkout-4.2.0 f2bf07d119 Merge pull request #1538 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi9-b00d599 3b955a30fc Merge pull request #1537 from bunkerity/dependabot/docker/src/linux/1.5/debian-ad86386 c0f3c52cf5 Merge pull request #1536 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi8-a965f33 10cb4c10c2 Merge pull request #1517 from bunkerity/dependabot/docker/tests/linux/1.5/redhat/ubi8-init-8.10-7 78938a838c Merge pull request #1515 from bunkerity/dependabot/docker/tests/linux/dev/redhat/ubi9-init-9.4-14.1726695630 2ddeba328a Merge pull request #1514 from bunkerity/dependabot/docker/src/linux/dev/redhat/ubi9-b00d599 ccc7306ad2 Merge pull request #1510 from bunkerity/dependabot/github_actions/dev/actions/setup-node-4.0.4 3878033e4d Merge pull request #1503 from bunkerity/dependabot/github_actions/1.5/actions/setup-python-5.2.0 a76ab412e9 Merge pull request #1501 from bunkerity/dependabot/github_actions/1.5/docker/login-action-3.3.0 26459853ce Merge pull request #1496 from bunkerity/dependabot/docker/src/linux/1.5/fedora-d0207db 9894bc0f19 deps/gha: Bump docker/build-push-action from 6.5.0 to 6.9.0 2d57bbbe30 deps/gha: Bump github/codeql-action from 3.26.7 to 3.26.10 0d6780fb7b deps/gha: Bump ruby/setup-ruby from 1.192.0 to 1.194.0 6c780986e9 deps/linux: Bump redhat/ubi9 from `7575b6e` to `b00d599` in /src/linux 3cb91d9382 deps/linux: Bump debian from `a629e79` to `ad86386` in /src/linux ce219c0239 deps/linux: Bump redhat/ubi8 from `fbfce63` to `a965f33` in /src/linux 6653c80a5c deps/gha: Bump github/codeql-action from 3.26.9 to 3.26.10 4da9a699b7 deps/gha: Bump docker/build-push-action from 6.7.0 to 6.9.0 eb35eecb0b Merge pull request #1494 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi8-fbfce63 5c2cb3f753 deps/linux: Bump fedora from `5ce8497` to `d0207db` in /src/linux 55713a7f2c Merge pull request #1493 from bunkerity/dependabot/docker/tests/linux/1.5/debian-b8084b1 7cd9c2fc33 deps/tests/linux: Bump debian in /tests/linux edb4cad78c Merge pull request #1488 from bunkerity/dependabot/docker/tests/linux/1.5/fedora-d0207db c0ea53c21a Merge pull request #1487 from bunkerity/dependabot/docker/src/linux/1.5/debian-a629e79 e6acb2d5a4 Merge pull request #1486 from bunkerity/dependabot/docker/src/linux/1.5/redhat/ubi9-7575b6e 276e43c6d7 Merge pull request #1500 from bunkerity/dependabot/github_actions/1.5/actions/upload-artifact-4.4.0 59fd259339 Merge pull request #1499 from bunkerity/dependabot/github_actions/1.5/hashicorp/setup-terraform-3.1.2 c34a0d19a5 Merge pull request #1520 from bunkerity/dependabot/github_actions/dev/github/codeql-action-3.26.9 09e84bf754 Update python deps in tests 666f903933 Update python deps 773d50738f Refactor flash function call to flask_flash for better error handling when the database has fallen back 174e437046 Refactor Job Scheduler for better performance 5989988c93 Optimize Templator rendering process for faster performance a272448242 Refactor save_config method to greatly accelerate config saves 4d0a53ec90 Refactor Config class to use ThreadPoolExecutor for processing services d8c4315c47 Fix handling of non-draft services in pro metadata 17331d6a5a Update DB diagram daced9429e Fix iso-prod ui file with misc configs d7863f8df2 Add setup wizard page and optimize a few pages 970874e983 Update coreruleset-v4 version to v4.7.0 e2d5247592 Refactor modsec-crs UI routes to conditionally remove rules for specific URLs 1cc221176e Refactor UI routes to pass services to config edit and config new pages 12057ffa8d Add home page and plugins page to web UI 071bb9e4ac Refactor Database.py to conditionally set the database URI and update metadata for non-draft services 255d4a8f20 deps/gha: Bump ruby/setup-ruby from 1.192.0 to 1.194.0 2b72cec14a deps/gha: Bump actions/checkout from 4.1.7 to 4.2.0 77b1b665f8 fix ngx_slab_alloc() failed: no memory for arm64 linux rpi pagesize 16k. Increase initialization lua_shared_dict size to 48k 001cbf28dd deps/gha: Bump github/codeql-action from 3.26.6 to 3.26.9 aeee440f0d deps/tests/linux: Bump redhat/ubi8-init in /tests/linux b10b936931 deps/linux: Bump redhat/ubi8 from `fbfce63` to `a965f33` in /src/linux 42350a1e9b deps/tests/linux: Bump redhat/ubi8-init in /tests/linux be4820966d deps/tests/linux: Bump redhat/ubi9-init in /tests/linux d889aa66d4 deps/tests/linux: Bump redhat/ubi9-init in /tests/linux 98bfd6b488 deps/linux: Bump redhat/ubi9 from `7575b6e` to `b00d599` in /src/linux 33eea02c6e Add readonly specifications to ui routes 1263484e52 Refactor Database.py to conditionally set the database URI f180404c8d Refactor Dockerfile path in integrations.md e723912588 Add notification sidebar to web UI with back-end logic 4f9e0e1fea Optimize and fix stuff in web UI c021b24082 Refactor filter condition in Database.py to use 'type' instead of 'method' ead4cc91ba Start separating overrides made in template files (css, js, ...) 059702b03d Lint HTML files c6d9846279 Add reports, bans, logs and jobs page to web UI 16582d7857 deps/gha: Bump actions/setup-node from 4.0.3 to 4.0.4 b75a0fe5f5 Add configs and cache page to web UI 65dd49f2bc deps/gha: Bump actions/setup-python from 5.1.1 to 5.2.0 6169610199 deps/gha: Bump docker/login-action from 3.2.0 to 3.3.0 fbeb529435 deps/gha: Bump actions/upload-artifact from 4.3.4 to 4.4.0 8baa13748c deps/gha: Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2 a968956c5b deps/linux: Bump redhat/ubi8 from `44d7500` to `fbfce63` in /src/linux 97561c9898 deps/tests/linux: Bump fedora in /tests/linux a7531701fe deps/linux: Bump debian from `d02c76d` to `a629e79` in /src/linux ac30c49750 deps/linux: Bump redhat/ubi9 from `1ee4d8c` to `7575b6e` in /src/linux b454f2cf86 fix type for REVERSE_PROXY_SSL_SNI_NAME setting and fix nginx dependency condition for fedora package 530ee80cfa ci/cd - fix wrong deb filename for linux UI tests 15fa91d53e Merge pull request #1375 from spwoodcock/docs/allowed-methods-post 13444ed5d2 Merge pull request #1433 from jbbandos/master d285dc97a2 Merge pull request #1394 from eltociear/patch-1 19b081e92c Merge branch '1.5' into patch-1 fed29e2335 Merge pull request #1474 from jonas0b1011001/patch-1 588b634ded dompurify update 1cf03d454c update nginx version to 1.26.2 and update deps 492b5b1944 Finish features for easy mode in services page + start adding actions to services page 086de4fb54 Refactor main.py to handle custom config retrieval and handling more efficiently 50c3b9473f Refactor Database.py to improve custom config retrieval and handling ce410069af Refactor low.json and low_anomaly_score.conf for modsec settings 118fd50c43 Merge pull request #1480 from bunkerity/dependabot/npm_and_yarn/src/ui/dompurify-3.1.3 fa0b7e0ee3 Merge pull request #1483 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.192.0 5927a8cfae deps/gha: Bump ruby/setup-ruby from 1.191.0 to 1.192.0 7054ee2341 linux - improve logging for jobs 037289e4dd chore(deps): Bump dompurify from 3.0.9 to 3.1.3 in /src/ui 1acef1f69d lets encrypt - force regeneration of certs when switching environment (prod/staging) f73632f8c7 Enhance QOL in web UI in general + made advancements in easy mode for services 398a33ccfe Refactor templates values gathering for multisite settings 6ee2609ad8 Allow HTTP Request Method REPORT 274c1260d9 linux - fix scheduler logs 27152f0977 Add services page to web UI and finish raw mode for service settings v1 37cdd322af Update iso-prod files 6224fb8930 Add keyword filtering feature to advanced settings display in web UI 7f0356c098 Ignore DYNPKG_RELEASE variable in Configurator abf392729c Update pytz version to 2024.2 29a2582f4b Fix shenanigans with setup wizard 8000b93f3e Fix ignoring of DYNPKG_RELEASE variable in Configurator e43dc79b92 Update dependencies d601c88f82 Update Python Alpine base image to version 3.12.6 ce2df607f3 Merge pull request #1…
1 parent 6b97cd3 commit 917109e

File tree

6,457 files changed

+1956913
-30974
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

6,457 files changed

+1956913
-30974
lines changed

‎.dockerignore

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
.git
2+
.idea/
3+
.vscode/
4+
__pycache__/
5+
6+
env/
7+
src/deps/tmp_venv/
8+
tests/

‎.gitattributes

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
* text=auto eol=lf
2+
3+
# Folders
4+
src/deps/src/** -text -eol linguist-vendored=true
5+
src/common/core/modsecurity/files/** -text -eol linguist-vendored=true
6+
src/ui/static/js/editor/** -text -eol linguist-vendored=true
7+
src/ui/static/js/utils/purify/** -text -eol linguist-vendored=true
8+
src/ui/static/webfonts/** -text -eol linguist-vendored=true
9+
src/ui/templates/*.html -text -eol linguist-vendored=true
10+
src/common/core/antibot/files/*.html -text -eol linguist-vendored=true
11+
12+
# Files
13+
src/deps/misc/lua-pack.Makefile -linguist-vendored=true
14+
src/deps/misc/ngx_http_modsecurity_access.c -linguist-vendored=true
15+
src/ui/static/css/datepicker-foundation.css -linguist-vendored=true
16+
src/ui/static/css/flatpickr.css -linguist-vendored=true
17+
src/ui/static/css/flatpickr.dark.css -linguist-vendored=true
18+
src/ui/static/js/tsparticles.bundle.min.js -linguist-vendored=true
19+
src/ui/static/js/utils/flatpickr.js -linguist-vendored=true
20+
src/common/core/errors/files/error.html -linguist-vendored=true
21+
src/common/core/misc/files/default.html -linguist-vendored=true

‎.github/ISSUE_TEMPLATE/bug_report.yml

+91
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,91 @@
1+
name: 🐛 Bug Report
2+
description: Create a report to help us reproduce and fix the bug
3+
title: "[BUG] "
4+
labels: ["bug"]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: >
9+
#### Before submitting a bug, please make sure the issue hasn't been already addressed by searching through [the existing and past issues](https://github.com/bunkerity/bunkerweb/issues?q=is%3Aissue+sort%3Acreated-desc+).
10+
- type: textarea
11+
id: what-happened
12+
attributes:
13+
label: What happened?
14+
description: Concise description of what you're trying to do, the expected behavior and the current bug.
15+
placeholder: Describe the bug, the expected behavior and the current behavior
16+
validations:
17+
required: true
18+
- type: textarea
19+
id: how-to-reproduce
20+
attributes:
21+
label: How to reproduce?
22+
description: Concise description of how to reproduce the issue.
23+
placeholder: Describe how to reproduce the issue
24+
validations:
25+
required: true
26+
- type: textarea
27+
id: configuration-file
28+
attributes:
29+
label: Configuration file(s) (yaml or .env)
30+
description: |
31+
Please copy and paste your configuration file or the relevant part of it.
32+
⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️
33+
placeholder: Configuration file
34+
render: YAML
35+
- type: textarea
36+
id: logs
37+
attributes:
38+
label: Relevant log output
39+
description: |
40+
Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks.
41+
⚠️ DON'T FORGET TO REMOVE PRIVATE DATA LIKE IP ADDRESSES ! ⚠️
42+
placeholder: Log output
43+
render: shell
44+
- type: input
45+
id: version
46+
attributes:
47+
label: BunkerWeb version
48+
description: What version of BunkerWeb are you running?
49+
placeholder: Version
50+
value: 1.6.0-rc2
51+
validations:
52+
required: true
53+
- type: dropdown
54+
id: integration
55+
attributes:
56+
label: What integration are you using?
57+
options:
58+
- Docker
59+
- Autoconf
60+
- Swarm
61+
- Kubernetes
62+
- Linux
63+
- Ansible
64+
- Vagrant
65+
default: 0
66+
validations:
67+
required: true
68+
- type: input
69+
id: linux-distribution
70+
attributes:
71+
label: Linux distribution (if applicable)
72+
description: What Linux distribution are you using? (e.g. Ubuntu Server 18.04)
73+
placeholder: Linux distribution
74+
- type: checkboxes
75+
id: removed-private-data
76+
attributes:
77+
label: Removed private data
78+
description: |
79+
We would like to emphasize that we are not responsible for any private data that may be inadvertently included in the logs or configuration files.
80+
⚠️ I have removed all private data from the configuration file and the logs ⚠️
81+
options:
82+
- label: I have removed all private data from the configuration file and the logs
83+
required: true
84+
- type: checkboxes
85+
id: terms
86+
attributes:
87+
label: Code of Conduct
88+
description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/bunkerity/bunkerweb/blob/master/CODE_OF_CONDUCT.md)
89+
options:
90+
- label: I agree to follow this project's Code of Conduct
91+
required: true

‎.github/ISSUE_TEMPLATE/documentation.yml

+29
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
name: 📚 Documentation enhancement
2+
description: Suggest an idea that will improve BunkerWeb documentation or declare a bug in the documentation
3+
title: "[DOC] "
4+
labels: ["documentation"]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: >
9+
#### Before submitting a documentation enhancement request, please make sure the feature hasn't been already addressed by searching through [the existing and past documentation enhancement requests](https://github.com/bunkerity/bunkerweb/issues?q=is%3Aissue+sort%3Acreated-desc+%5BDOC%5D+in%3Atitle).
10+
- type: textarea
11+
id: description
12+
attributes:
13+
label: Description
14+
description: Concise description of the error or what is missing.
15+
validations:
16+
required: true
17+
- type: textarea
18+
id: proposed-solution
19+
attributes:
20+
label: Proposed solution (optional)
21+
description: How it should be fixed or what should be added ?
22+
- type: checkboxes
23+
id: terms
24+
attributes:
25+
label: Code of Conduct
26+
description: By submitting this documentation enhancement request, you agree to follow our [Code of Conduct](https://github.com/bunkerity/bunkerweb/blob/master/CODE_OF_CONDUCT.md)
27+
options:
28+
- label: I agree to follow this project's Code of Conduct
29+
required: true

‎.github/ISSUE_TEMPLATE/feature_request.yml

+29
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
name: 🚀 Feature Request
2+
description: Suggest an idea that will improve BunkerWeb
3+
title: "[FEATURE] "
4+
labels: ["enhancement"]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: >
9+
#### Before submitting a feature request, please make sure the feature hasn't been already addressed by searching through [the existing and past feature requests](https://github.com/bunkerity/bunkerweb/issues?q=is%3Aissue+sort%3Acreated-desc+%5BFEATURE%5D+in%3Atitle).
10+
- type: textarea
11+
id: whats-needed-and-why
12+
attributes:
13+
label: What's needed and why?
14+
description: Describe the feature you would like to see in the project and why it should be implemented.
15+
validations:
16+
required: true
17+
- type: textarea
18+
id: implementations-ideas
19+
attributes:
20+
label: Implementations ideas (optional)
21+
description: How it should be used and integrated into the project ? List some posts, research papers or codes that we can use as implementation.
22+
- type: checkboxes
23+
id: terms
24+
attributes:
25+
label: Code of Conduct
26+
description: By submitting this feature request, you agree to follow our [Code of Conduct](https://github.com/bunkerity/bunkerweb/blob/master/CODE_OF_CONDUCT.md)
27+
options:
28+
- label: I agree to follow this project's Code of Conduct
29+
required: true

‎.github/codeql.yml

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
name: "CodeQL config"
2+
3+
paths:
4+
- src/autoconf
5+
- src/scheduler
6+
- src/ui
7+
- src/common
8+
paths-ignore:
9+
- src/ui/static/js/tsparticles.bundle.min.js
10+
- src/ui/static/js/editor
11+
- src/ui/static/js/utils/flatpickr.js
12+
- src/ui/static/js/utils/purify
13+
- src/common/core/modsecurity/files

0 commit comments

Comments
 (0)