• Joined on 2021-01-05
jknapp created branch main in cloud-hosting-pla…/kb-anhonesthost 2026-05-18 01:04:39 +00:00
jknapp pushed to main at cloud-hosting-pla…/kb-anhonesthost 2026-05-18 01:04:39 +00:00
fef98357c7 docs(admin): add WHP super-admin section (5 draft articles)
5d829c44ba docs(explainer): switch analogy to apartment vs townhome in a gated community
2cd10bc56d feat(nav): rename Hosting link to 'Get a Plan'
ccfe8bb649 feat(nav): top-bar Hosting + Client Portal links
c602b8f8f3 docs: verify against real WHP + capture real screenshots
Compare 10 commits »
jknapp created repository cloud-hosting-pla…/kb-anhonesthost 2026-05-18 01:04:30 +00:00
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-15 13:02:59 +00:00
e58454c1cc docs: add haproxy-manager-deploy skill
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-15 12:48:17 +00:00
c1331a592a waf-block page: escape literal % as %% (HAProxy lf-file expansion)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-15 12:41:18 +00:00
d931ab0dbc waf-block: render a real HTML page on Coraza-denied requests
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-14 15:57:08 +00:00
220b28f0c4 haproxy: use req.hdr_ip for real-IP resolution (string-IP crashed Coraza SPOA)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-14 15:52:05 +00:00
9770398ab0 coraza: pass var(txn.real_ip) instead of src to Coraza (real client IP in WAF logs)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-14 15:08:41 +00:00
633d9390f2 coraza: pin go.mod to 1.23 (matches go mod tidy output; Dockerfile still uses 1.25 image)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-14 14:55:57 +00:00
6d43308073 coraza: pre-CRS Include for runtime per-host exemptions (load-order fix)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-14 13:57:48 +00:00
489290ed33 coraza: ship rules-catalog.json generated from bundled CRS at build time
b2adcdbed9 coraza: reserve rule-ID range 990000000-990999999 for WHP-generated rules
1f1bc1837e coraza: add second Include for runtime-managed local-overrides.conf
Compare 3 commits »
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-14 02:13:24 +00:00
753743de20 coraza: drop 913xxx scanner-UA from enforce list (FP on Mastodon + SiteLock)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 19:08:48 +00:00
5e5234cb14 refactor(suspension): serve via /suspended route on default-backend, drop bk_suspended
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 18:52:53 +00:00
6fd07b4c54 fix(suspended): tolerate startup DNS failure + use docker_dns resolvers
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 18:46:22 +00:00
2ef582a3de feat(suspension): opt-in routing for suspended hosts via bk_suspended backend
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 01:00:23 +00:00
3572c66fb7 coraza: promote 920440 + 930130 to enforce list (empirical detect-only data)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 00:16:07 +00:00
ba4c101135 fix(coraza): add deny rules that act on Coraza's verdict + spop-check on backend
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 00:12:12 +00:00
f1e9bb2c63 fix(coraza-spoe): match upstream's required spoe shape (groups, arg order, names)
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 00:07:15 +00:00
061309675b fix(coraza-spoe): collapse args to one line + ensure trailing LF on spoe cfg
jknapp pushed to main at cloud-hosting-pla…/haproxy-manager-base 2026-05-13 00:03:59 +00:00
4769f67fe9 fix(coraza): ensure haproxy.cfg ends with LF when SPOE backend appended