shadowdaoandClaude Opus 5.5 cbbd15b787 feat(waf): log why Coraza acted (wrule/wrules/wscore); VERSION 2026.10.4 ...

coraza-spoa v0.7.1 already returns the interrupting rule id
(txn.coraza.ruleid) and, when the request message sends
exportRuleIDs=bool(true), the comma list of every matched CRS attack
rule (txn.coraza.rule_ids) plus the inbound anomaly score. Send the arg
and append all three to the access log so a block's cause (e.g.
920440,949110 score 5) is visible in haproxy.log without opening the
Coraza audit log. Fields are appended last; existing ones unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-16 08:20:46 -07:00

..

blocked_ip_page.html

Update blocked IP handling to use custom blocked page with 403 status

2025-08-22 08:36:57 -07:00

default_page.html

Add default backend page for unmatched domains

2025-07-11 19:10:05 -07:00

hap_backend_basic.tpl

Remove ACL-based security protections to eliminate false positives

2025-11-03 15:35:25 -08:00

hap_backend_http_check.tpl

fix(haproxy): set X-CLIENT-IP instead of adding it

2026-09-18 16:32:49 -07:00

hap_backend_longlived.tpl

fix(haproxy): set X-CLIENT-IP instead of adding it

2026-09-18 16:32:49 -07:00

hap_backend_websocket.tpl

fix(haproxy): set X-CLIENT-IP instead of adding it

2026-09-18 16:32:49 -07:00

hap_backend.tpl

fix(haproxy): set X-CLIENT-IP instead of adding it

2026-09-18 16:32:49 -07:00

hap_coraza_spoa_backend.tpl

fix(coraza): add deny rules that act on Coraza's verdict + spop-check on backend

2026-05-12 17:16:03 -07:00

hap_coraza_spoe_engine.tpl

feat(waf): log why Coraza acted (wrule/wrules/wscore); VERSION 2026.10.4

2026-10-16 08:20:46 -07:00

hap_default_backend.tpl

Fix HAProxy 2.6 compatibility for default backend

2025-07-11 19:27:42 -07:00

hap_header.tpl

feat(waf): make Coraza see request bodies; stamp complete/partial; 2026.10.2

2026-10-09 10:49:27 -07:00

hap_letsencrypt_backend.tpl

Fix Templates from causing errors with haproxy when added, Fix add notice when haproxy fails check

2025-02-21 06:28:51 -08:00

hap_letsencrypt.tpl

fix order of acls and backends, put db in volume

2025-02-20 16:26:27 -08:00

hap_listener.tpl

feat(waf): log why Coraza acted (wrule/wrules/wscore); VERSION 2026.10.4

2026-10-16 08:20:46 -07:00

hap_path_acl.tpl

haproxy manager

2025-02-20 13:41:38 -08:00

hap_security_tables.tpl

feat(haproxy): rate-limit POST /xmlrpc.php floods per client IP

2026-08-13 14:48:25 -07:00

hap_subdomain_acl.tpl

Add separate SSE backend for secure Server-Sent Events support

2025-12-26 13:48:24 -08:00

hap_wildcard_acl.tpl

Add wildcard domain support with DNS-01 ACME challenge flow

2026-02-19 13:06:08 -08:00

index.html

Fix HAProxy 2.6 compatibility for default backend

2025-07-11 19:27:42 -07:00

suspended_page.html

refactor(suspension): serve via /suspended route on default-backend, drop bk_suspended

2026-05-13 12:08:45 -07:00