Commit Graph

Select branches

Hide Pull Requests

feat/coraza-txn-id-equals-request-reference

fix/config-backup-ordering

fix/remove-domain-shared-cert-refcount

main

#1

#11

#2

#3

#4

#5

#6

#7

#8

#9

Mono Color

• df758a3fde Don't abort cert renewal when a single domain fails shadowdaoandClaude Opus 4.6 2026-04-01 15:17:15 -07:00
• fbb94e6dc3 Update CLAUDE.md with HAProxy hardening and AI log monitor docs shadowdaoandClaude Opus 4.6 2026-04-01 08:16:44 -07:00
• 58bb5b4f18 Fix: remove comments from trusted IP files breaking HAProxy startup shadowdaoandClaude Opus 4.6 2026-03-31 14:19:29 -07:00
• 68a6f1bc27 Raise rate limits further for media-heavy sites shadowdaoandClaude Opus 4.6 2026-03-31 14:12:24 -07:00
• 5bdc95109e Raise rate limit thresholds to avoid false positives on normal traffic shadowdaoandClaude Opus 4.6 2026-03-31 14:10:53 -07:00
• 978f173814 Add trusted IP whitelist for rate limit bypass shadowdaoandClaude Opus 4.6 2026-03-31 13:39:41 -07:00
• 2ba8f87c2c Raise connection rate limit from 60 to 150 per 10s shadowdaoandClaude Opus 4.6 2026-03-31 12:25:53 -07:00
• a3b19ce352 Add rate limiting, connection limits, and timeout hardening shadowdaoandClaude Opus 4.6 2026-03-31 10:00:53 -07:00
• 94af4e47c1 Add Host header capture to frontend for connection debugging shadowdaoandClaude Opus 4.6 2026-02-26 15:31:14 -08:00
• 124a5373d2 Fix wildcard SSL cert: find certbot -NNNN dirs and use _wildcard_ filename shadowdaoandClaude Opus 4.6 2026-02-20 06:38:28 -08:00
• 657cd28344 Fix certbot hook script paths and add logging shadowdaoandClaude Opus 4.6 2026-02-20 06:18:14 -08:00
• 91c92dd07e Add wildcard domain support with DNS-01 ACME challenge flow shadowdaoandClaude Opus 4.6 2026-02-19 13:04:32 -08:00
• 6cd64295d2 Add separate SSE backend for secure Server-Sent Events support shadowdaoandClaude 2025-12-26 13:48:24 -08:00
• eadd6b798f Adding support for SSE Streaming shadowdao 2025-12-26 13:07:29 -08:00
• 6902daaea1 Add automatic SSE detection and support to backend template shadowdao 2025-12-26 13:02:04 -08:00
• 1fcb25bb88 Update SQL logic to update instead of delete and re-add shadowdao 2025-12-18 12:23:06 -08:00
• bff18d358b Remove set -e and database dependency from certificate scripts shadowdaoandClaude 2025-11-21 08:50:24 -08:00
• 1d22d789b8 Simplify certificate renewal scripts and add certbot cleanup shadowdaoandClaude 2025-11-20 09:56:56 -08:00
• adc20d6d0b Improve certificate renewal script with atomic file updates shadowdaoandClaude 2025-11-19 19:27:40 -08:00
• 71f4b9ef05 Add CIDR notation support for IP blocking shadowdao 2025-11-17 12:07:32 -08:00
• 8d732318b4 Fix certificate renewal to properly update HAProxy combined certificate files shadowdaoandClaude 2025-11-11 20:10:58 -08:00
• 7eeba0d718 Remove ACL-based security protections to eliminate false positives shadowdaoandClaude 2025-11-03 15:35:25 -08:00
• 76b2e85ca8 Fix certificate renewal cron job and add host-side scheduling shadowdaoandClaude 2025-10-28 17:36:48 -07:00
• 288f4eb8a9 adding net-tools to allow connection number tracking shadowdao 2025-10-09 18:42:44 -07:00
• 8636b69ee1 Fix AWK syntax errors in monitoring scripts shadowdaoandClaude 2025-09-22 19:42:54 -07:00
• 4c4e99883b Fix table reference and log-format response header issues shadowdaoandClaude 2025-09-22 18:49:50 -07:00
• b293588eef Fix log-format multiline syntax causing parsing errors shadowdaoandClaude 2025-09-22 18:45:43 -07:00
• b55a2fa691 Fix ACL compound reference error for xmlrpc abuse detection shadowdaoandClaude 2025-09-22 18:39:37 -07:00
• 2889fda014 Fix HAProxy 3.0.11 variable comparison syntax in conditions shadowdaoandClaude 2025-09-22 18:34:45 -07:00
• 78ebfef497 Fix HAProxy 3.0.11 syntax errors in security templates shadowdaoandClaude 2025-09-22 18:17:36 -07:00
• cfabd39727 Implement HAProxy 3.0.11 enterprise-grade security enhancements shadowdaoandClaude 2025-09-22 17:51:44 -07:00
• 0ee9e6cba8 Remove all ACL-to-ACL references for HAProxy 3.0.11 compatibility shadowdaoandClaude 2025-09-22 17:44:44 -07:00
• ee8223c25f Complete HAProxy 3.0.11 syntax fixes for ACL and sc-inc errors shadowdaoandClaude 2025-09-22 17:37:16 -07:00
• 65248680a5 Fix HAProxy 3.0.11 compatibility issues shadowdaoandClaude 2025-09-22 17:29:32 -07:00
• 0a75d1b44e Implement advanced threat scoring and multi-table security system shadowdaoandClaude 2025-09-22 17:13:26 -07:00
• e2f350ce95 Add comprehensive anti-scan and brute force protection shadowdaoandClaude 2025-09-22 16:50:35 -07:00
• 002e79b565 Fix cron entry syntax in Dockerfile for HAProxy reload shadowdaoandClaude 2025-09-22 14:49:45 -07:00
• 402c48b4a0 Remove 40X rate limiting from HAProxy to prevent false positives shadowdaoandClaude 2025-08-30 08:54:55 -07:00
• 8c7031fd6d Fix HAProxy ACL syntax errors in backend templates shadowdaoandClaude 2025-08-25 12:45:13 -07:00
• 31801a6c1d Make scan detection more targeted to avoid false positives shadowdaoandClaude 2025-08-25 12:39:15 -07:00
• 6a4379c4a1 Add safeguards to prevent false positive blocking shadowdaoandClaude 2025-08-25 11:09:57 -07:00
• e54b4b4afe Implement progressive protection: tarpit → silent-drop → block shadowdaoandClaude 2025-08-25 06:42:09 -07:00
• 0a4995266c Simplify tarpit implementation for HAProxy 3.0 compatibility shadowdaoandClaude 2025-08-25 06:33:21 -07:00
• 2cd1db7461 Fix HAProxy 3.0 tarpit timeout syntax error shadowdaoandClaude 2025-08-25 06:17:08 -07:00
• b88da4c58f Implement HAProxy tarpit escalation and CLI monitoring shadowdaoandClaude 2025-08-24 19:33:10 -07:00
• 948fdecf52 Update all backend templates with real IP forwarding and scan detection shadowdaoandClaude 2025-08-24 06:59:26 -07:00
• 2b31fb9f4f Add real client IP detection for proxy/CDN environments shadowdaoandClaude 2025-08-24 06:51:00 -07:00
• 5ce4f910c2 Fix tarpit to only apply AFTER backend error responses shadowdaoandClaude 2025-08-23 18:48:21 -07:00
• de3a68b59c Fix tarpit applying to all connections - use proper threat ranges shadowdaoandClaude 2025-08-23 18:44:19 -07:00
• f3569402d3 Fix HAProxy 3.0 stick-table and ACL syntax errors shadowdaoandClaude 2025-08-23 18:36:02 -07:00
• 99435ee3e0 Fix HAProxy 3.0 compatibility issues in tarpit configuration shadowdaoandClaude 2025-08-23 18:30:34 -07:00
• 1eed03a3b6 Add HAProxy tarpit escalation for exploit scanning protection shadowdaoandClaude 2025-08-23 18:09:28 -07:00
• 2406d9f995 Add 403 status to blocked IP page and reload HAProxy on IP block/unblock shadowdaoandClaude 2025-08-22 10:06:04 -07:00
• 15c7f40b2e Fix bug with haproxy config for blocked address shadowdao 2025-08-22 09:48:24 -07:00
• 58fa6d8aba Update blocked IP handling to use custom blocked page with 403 status shadowdaoandClaude 2025-08-22 08:36:57 -07:00
• 7869b81f27 CRITICAL FIX: Migrate HAProxy IP blocking from ACL to map files shadowdaoandClaude 2025-08-22 08:31:17 -07:00
• ca37a68255 Add IP blocking functionality to HAProxy Manager shadowdaoandClaude 2025-08-21 18:32:47 -07:00
• a7ce40f600 Fix server configuration templates - add proper newlines between server entries shadowdao 2025-07-13 01:21:19 -07:00
• d4f54aef35 Fix HAProxy crash loop and improve startup resilience shadowdao 2025-07-11 19:37:41 -07:00
• fac6cef0db Fix HAProxy 2.6 compatibility for default backend shadowdao 2025-07-11 19:27:42 -07:00
• 27f3f8959b Add default backend page for unmatched domains shadowdao 2025-07-11 19:10:05 -07:00
• ef488a253d Add /api/certificates/request endpoint for programmatic certificate requests, update docs and add test script shadowdao 2025-07-11 17:14:01 -07:00
• 7b0b4c0476 Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details. shadowdao 2025-07-11 06:24:56 -07:00
• f58dbef3c5 Merge pull request 'Update Cron' (#2) from update-cron into main jknapp 2025-05-30 18:16:47 +00:00
• ac32141b34 Update Cron shadowdao 2025-05-30 11:16:12 -07:00
• bbd6a0c22c Update README jknapp 2025-05-30 00:03:17 +00:00
• 71b8085fb4 Merge pull request 'Fixing reload issue' (#1) from fix-reload into main jknapp 2025-04-18 23:53:17 +00:00
• 7550df9890 Fixing reload issue shadowdao 2025-04-18 16:52:57 -07:00
• 8ae1a6b99f debug reload shadowdao 2025-03-09 11:56:18 -07:00
• 9de12c72de added missing return shadowdao 2025-03-09 11:11:35 -07:00
• cb58f1d762 Switch reload from post to get shadowdao 2025-03-09 11:07:21 -07:00
• 2492eab708 Fix missing '/' shadowdao 2025-03-09 11:02:20 -07:00
• 64c707317f Adding reload function and more tweaks for backends shadowdao 2025-03-09 10:59:03 -07:00
• 7e53ba00d8 update again for GET Method shadowdao 2025-03-07 19:29:20 -08:00
• 2c66b1bf40 fix method to GET instead of POST shadowdao 2025-03-07 19:13:41 -08:00
• edaefd9cd1 remove the extra lines at the end of the index shadowdao 2025-03-07 19:09:51 -08:00
• d3dd69cc02 Adding config regenerate shadowdao 2025-03-07 19:06:38 -08:00
• c27f7fb5e8 Adding httpchk options shadowdao 2025-03-07 17:19:22 -08:00
• 748ae8a4b7 Updating README.md to include web interface shadowdao 2025-03-07 15:57:56 -08:00
• 7b1e8a9536 Fix issue where backend was not getting created shadowdao 2025-03-06 21:03:08 -08:00
• 6f395fa621 fix issue with existing domains and new domains conflicting shadowdao 2025-03-06 17:45:02 -08:00
• 94f9223bc7 troubleshoot errors with web interface shadowdao 2025-03-06 17:14:42 -08:00
• 9621786175 Adding web interface shadowdao 2025-03-06 16:51:29 -08:00
• de2957fcd2 Update README.md for changes to script shadowdao 2025-02-21 10:29:31 -08:00
• c5f29374e1 Fix Template Override shadowdao 2025-02-21 10:17:15 -08:00
• d944a75fb5 fix backend creation shadowdao 2025-02-21 08:28:56 -08:00
• ac40737fd7 Adding template overrides shadowdao 2025-02-21 08:07:58 -08:00
• 6b28c118de Adding template overrides shadowdao 2025-02-21 08:01:16 -08:00
• c47118729f add new line at the end of the server block to prevent issue with haproxy reloading shadowdao 2025-02-21 06:42:30 -08:00
• ff529be07f Fix Templates from causing errors with haproxy when added, Fix add notice when haproxy fails check shadowdao 2025-02-21 06:28:51 -08:00
• c951103b3b adding function on start up shadowdao 2025-02-21 06:00:37 -08:00
• 0357a73770 cleanup template shadowdao 2025-02-20 17:13:25 -08:00
• 1df58758b5 Make haproxy start with the script shadowdao 2025-02-20 17:00:28 -08:00
• 673265690a fix file name error shadowdao 2025-02-20 16:32:07 -08:00
• 32498f1a04 fix order of acls and backends, put db in volume shadowdao 2025-02-20 16:26:27 -08:00
• f51498a3b2 Fix Docker command shadowdao 2025-02-20 15:41:38 -08:00
• ff46f0a616 Add regenerate endpoint shadowdao 2025-02-20 15:40:32 -08:00
• 576666d9da Fixing order for haproxy config shadowdao 2025-02-20 15:29:42 -08:00
• b834a3c484 Update workflow shadowdao 2025-02-20 14:46:30 -08:00
• 21e0e99796 Update README.md shadowdao 2025-02-20 14:37:18 -08:00