shadowdao 704be38882 feat(haproxy): gate unauthenticated wp-admin requests at the edge ...

Redirect /wp-admin/* to the site's login page when no wordpress_logged_in_
cookie is present, so unauthenticated requests never boot PHP. Identity-based
rather than rate-based, so it is unaffected by how widely an attack is
distributed. Allowlists the paths that legitimately serve unauthenticated
visitors, including the css/js the login page itself loads.

2026-08-14 07:45:52 -07:00

..

cert-publish-lib.sh

fix(certs): stop the test suite bricking the container; make the pairing check real

2026-08-06 10:03:37 -07:00

clear-ip.sh

Add safeguards to prevent false positive blocking

2025-08-25 11:09:57 -07:00

dns-challenge-auth-hook.sh

Add wildcard domain support with DNS-01 ACME challenge flow

2026-02-19 13:06:08 -08:00

dns-challenge-cleanup-hook.sh

Add wildcard domain support with DNS-01 ACME challenge flow

2026-02-19 13:06:08 -08:00

ensure_haproxy.py

fix(supervisor): restart haproxy in-place if it dies while container lives

2026-07-01 09:07:11 -07:00

external-monitoring-example.conf

Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details.

2025-07-11 06:24:56 -07:00

host-crontab-example.txt

Fix certificate renewal cron job and add host-side scheduling

2025-10-28 17:36:48 -07:00

host-renew-certificates.sh

Simplify certificate renewal scripts and add certbot cleanup

2025-11-20 09:56:56 -08:00

init.py

swap werkzeug dev server for gunicorn + accept all HTTP methods on default/blocked pages

2026-05-12 15:24:28 -07:00

manage-blocked-ips.sh

fix(blocked-ips): correct map format + worker socket in manage-blocked-ips.sh

2026-06-24 13:40:11 -07:00

monitor-attacks.sh

Fix AWK syntax errors in monitoring scripts

2025-09-22 19:42:54 -07:00

monitor-errors-external.sh

Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details.

2025-07-11 06:24:56 -07:00

monitor-errors.sh

Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details.

2025-07-11 06:24:56 -07:00

monitoring-example.conf

Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details.

2025-07-11 06:24:56 -07:00

renew-certificates.sh

fix(certs): stop the test suite bricking the container; make the pairing check real

2026-08-06 10:03:37 -07:00

show-tarpit-ips.sh

Make scan detection more targeted to avoid false positives

2025-08-25 12:39:15 -07:00

start-up.sh

feat(haproxy): ship per-site exempt list for the wp-admin edge gate

2026-08-14 07:43:20 -07:00

sync-certificates.sh

fix(certs): stop the test suite bricking the container; make the pairing check real

2026-08-06 10:03:37 -07:00

test-api.sh

Major upgrade: API key authentication, certificate renewal/download endpoints, monitoring/alerting scripts, improved logging, and documentation updates. See UPGRADE_SUMMARY.md for details.

2025-07-11 06:24:56 -07:00

test-cert-scripts.py

fix(certs): stop the test suite bricking the container; make the pairing check real

2026-08-06 10:03:37 -07:00

test-cert-write-safety.py

fix(certs): stop the test suite bricking the container; make the pairing check real

2026-08-06 10:03:37 -07:00

test-certificate-request.sh

Add /api/certificates/request endpoint for programmatic certificate requests, update docs and add test script

2025-07-11 17:14:01 -07:00

test-config-rollback.py

fix(config): write blocked_ips.map atomically; close review gaps

2026-08-06 09:45:35 -07:00

test-ip-blocking.sh

Add IP blocking functionality to HAProxy Manager

2025-08-21 18:32:47 -07:00

test-trusted-proxy-gate.py

fix(haproxy): only honour proxy headers from trusted sources

2026-08-13 13:28:31 -07:00

test-wpadmin-gate.py

feat(haproxy): gate unauthenticated wp-admin requests at the edge

2026-08-14 07:45:52 -07:00

test-xmlrpc-rate-limit.py

feat(haproxy): rate-limit POST /xmlrpc.php floods per client IP

2026-08-13 14:48:25 -07:00