10 Commits

Include renames

Author	SHA1	Message	Date
shadowdaoandClaude Opus 4.6	53d259bd3f	Add trusted IP whitelist for rate limit bypass ... Adds trusted_ips.list and trusted_ips.map files that exempt specific IPs from all rate limiting rules. Supports both direct source IP matching (is_trusted_ip) and proxy-header real IP matching (is_whitelisted). Files are baked into the image and can be updated by editing and rebuilding. Adds phone system IP 172.116.197.166 to the whitelist. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-31 13:39:41 -07:00
shadowdaoandClaude Opus 4.6	a3b19ce352	Add rate limiting, connection limits, and timeout hardening ... Activate HAProxy's built-in attack prevention to stop floods that cause the container to become unresponsive: - Stick table tracks per-IP: conn_cur, conn_rate, http_req_rate, http_err_rate - Rate limit rules: deny at 50 req/s, tarpit at 20 req/s, connection rate limit at 60/10s, concurrent connection cap at 100, error rate tarpit at 20 errors/30s - Harden timeouts: http-request 300s→30s, connect 120s→10s, client 10m→5m, keep-alive 120s→30s - HTTP/2 Rapid Reset protection (CVE-2023-44487): stream and glitch limits - Stats frontend on localhost:8404 for monitoring - HEALTHCHECK now validates both port 80 (HAProxy) and 8000 (API) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-31 10:00:53 -07:00
shadowdaoandClaude	76b2e85ca8	Fix certificate renewal cron job and add host-side scheduling ... - Fixed crontab permissions (600) and ownership for proper cron execution - Added PATH environment variable to crontab to prevent command not found issues - Created dedicated renewal script with comprehensive logging and error handling - Added retry logic (3 attempts) for HAProxy reload with socket health checks - Implemented host-side renewal script for external cron scheduling via docker exec - Added crontab configuration examples for various renewal schedules - Updated README with detailed certificate renewal documentation This resolves issues where the cron job would not run or hang during execution. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-10-28 17:36:48 -07:00
shadowdao	288f4eb8a9	adding net-tools to allow connection number tracking	2025-10-09 18:42:44 -07:00
shadowdaoandClaude	002e79b565	Fix cron entry syntax in Dockerfile for HAProxy reload ... Escape inner quotes in the certbot renewal cron job to properly send reload command to HAProxy via socat after certificate renewal. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-09-22 14:49:45 -07:00
shadowdao	7b0b4c0476	Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details.	2025-07-11 06:24:56 -07:00
shadowdao	ac32141b34	Update Cron ... Simplify Cron Process to reduce the possibility of it to hang when running	2025-05-30 11:16:12 -07:00
shadowdao	a886013421	Add curl for health check	2025-02-20 14:28:58 -08:00
shadowdao	305fffba42	haproxy manager	2025-02-20 13:41:38 -08:00
shadowdao	9c52edd53a	Not fully working, but saving progress	2025-02-19 07:53:26 -08:00