RC-2 0.5.2

2026-08-24 05:46:42 +02:00
parent 934b013d18
commit 7c69432097
34 changed files with 2393 additions and 52 deletions
@@ -0,0 +1,77 @@
+{
+  "listen": "127.0.0.1:9081",
+  "allowed_hosts": [
+    "ts.hilden.info",
+    "sessionguard.hilden.info"
+  ],
+  "blacklist_file": "/etc/sessionguard-edgeguard/blacklist.txt",
+  "rate_exempt_file": "/etc/sessionguard-edgeguard/rate-exempt.txt",
+  "state_file": "/var/lib/sessionguard-edgeguard/state.json",
+  "reload_seconds": 15,
+  "max_uri_length": 8192,
+  "global_limit": {
+    "rate_per_second": 2500,
+    "burst": 5000
+  },
+  "per_ip_limit": {
+    "rate_per_second": 200,
+    "burst": 500
+  },
+  "rules": [
+    {
+      "name": "guac-access-login",
+      "host": "ts.hilden.info",
+      "path_prefix": "/_sessionguard/auth/login",
+      "rate_per_second": 5,
+      "burst": 100
+    },
+    {
+      "name": "guac-access-callback",
+      "host": "ts.hilden.info",
+      "path_prefix": "/_sessionguard/auth/oidc/callback",
+      "rate_per_second": 10,
+      "burst": 100
+    },
+    {
+      "name": "sessionguard-oidc",
+      "host": "sessionguard.hilden.info",
+      "path_prefix": "/oidc/",
+      "rate_per_second": 5,
+      "burst": 50
+    }
+  ],
+  "blocked_methods": [
+    "CONNECT",
+    "TRACE",
+    "TRACK"
+  ],
+  "scanner_path_prefixes": [
+    "/.env",
+    "/.git",
+    "/.svn",
+    "/.hg",
+    "/wp-admin",
+    "/wp-login.php",
+    "/phpmyadmin",
+    "/pma",
+    "/cgi-bin",
+    "/server-status",
+    "/actuator",
+    "/vendor/phpunit",
+    "/boaform",
+    "/HNAP1",
+    "/solr/",
+    "/jenkins/"
+  ],
+  "auto_ban": {
+    "enabled": true,
+    "threshold": 10,
+    "window_seconds": 120,
+    "ban_seconds": 900,
+    "scanner_weight": 5,
+    "method_weight": 3,
+    "rate_limit_weight": 0,
+    "invalid_uri_weight": 3
+  },
+  "max_tracked_ips": 100000
+}