78 lines
1.6 KiB
JSON
78 lines
1.6 KiB
JSON
{
|
|
"listen": "127.0.0.1:9081",
|
|
"allowed_hosts": [
|
|
"ts.hilden.info",
|
|
"sessionguard.hilden.info"
|
|
],
|
|
"blacklist_file": "/etc/sessionguard-edgeguard/blacklist.txt",
|
|
"rate_exempt_file": "/etc/sessionguard-edgeguard/rate-exempt.txt",
|
|
"state_file": "/var/lib/sessionguard-edgeguard/state.json",
|
|
"reload_seconds": 15,
|
|
"max_uri_length": 8192,
|
|
"global_limit": {
|
|
"rate_per_second": 2500,
|
|
"burst": 5000
|
|
},
|
|
"per_ip_limit": {
|
|
"rate_per_second": 200,
|
|
"burst": 500
|
|
},
|
|
"rules": [
|
|
{
|
|
"name": "guac-access-login",
|
|
"host": "ts.hilden.info",
|
|
"path_prefix": "/_sessionguard/auth/login",
|
|
"rate_per_second": 5,
|
|
"burst": 100
|
|
},
|
|
{
|
|
"name": "guac-access-callback",
|
|
"host": "ts.hilden.info",
|
|
"path_prefix": "/_sessionguard/auth/oidc/callback",
|
|
"rate_per_second": 10,
|
|
"burst": 100
|
|
},
|
|
{
|
|
"name": "sessionguard-oidc",
|
|
"host": "sessionguard.hilden.info",
|
|
"path_prefix": "/oidc/",
|
|
"rate_per_second": 5,
|
|
"burst": 50
|
|
}
|
|
],
|
|
"blocked_methods": [
|
|
"CONNECT",
|
|
"TRACE",
|
|
"TRACK"
|
|
],
|
|
"scanner_path_prefixes": [
|
|
"/.env",
|
|
"/.git",
|
|
"/.svn",
|
|
"/.hg",
|
|
"/wp-admin",
|
|
"/wp-login.php",
|
|
"/phpmyadmin",
|
|
"/pma",
|
|
"/cgi-bin",
|
|
"/server-status",
|
|
"/actuator",
|
|
"/vendor/phpunit",
|
|
"/boaform",
|
|
"/HNAP1",
|
|
"/solr/",
|
|
"/jenkins/"
|
|
],
|
|
"auto_ban": {
|
|
"enabled": true,
|
|
"threshold": 10,
|
|
"window_seconds": 120,
|
|
"ban_seconds": 900,
|
|
"scanner_weight": 5,
|
|
"method_weight": 3,
|
|
"rate_limit_weight": 0,
|
|
"invalid_uri_weight": 3
|
|
},
|
|
"max_tracked_ips": 100000
|
|
}
|