jane remover
Some checks failed
Docker image builds / build (push) Waiting to run
Asset Build Verification / asset_verification (push) Has been cancelled
Docs deploy / build (push) Has been cancelled
Go Mod Tidy Check / go_mod_tidy_check (push) Has been cancelled
Go / go_tests (push) Has been cancelled
Package builds (unstable) / package_builds (push) Has been cancelled
Smoke tests / smoke-test (default-config-macro) (push) Has been cancelled
Smoke tests / smoke-test (docker-registry) (push) Has been cancelled
Smoke tests / smoke-test (double_slash) (push) Has been cancelled
Smoke tests / smoke-test (forced-language) (push) Has been cancelled
Smoke tests / smoke-test (git-clone) (push) Has been cancelled
Smoke tests / smoke-test (git-push) (push) Has been cancelled
Smoke tests / smoke-test (healthcheck) (push) Has been cancelled
Smoke tests / smoke-test (i18n) (push) Has been cancelled
Smoke tests / smoke-test (log-file) (push) Has been cancelled
Smoke tests / smoke-test (nginx) (push) Has been cancelled
Smoke tests / smoke-test (palemoon/amd64) (push) Has been cancelled
Smoke tests / smoke-test (robots_txt) (push) Has been cancelled
Check Spelling / Check Spelling (push) Has been cancelled
SSH CI / ssh (aarch64-16k) (push) Has been cancelled
SSH CI / ssh (aarch64-4k) (push) Has been cancelled
SSH CI / ssh (ppc64le) (push) Has been cancelled
SSH CI / ssh (riscv64) (push) Has been cancelled
zizmor / zizmor latest via PyPI (push) Has been cancelled
Some checks failed
Docker image builds / build (push) Waiting to run
Asset Build Verification / asset_verification (push) Has been cancelled
Docs deploy / build (push) Has been cancelled
Go Mod Tidy Check / go_mod_tidy_check (push) Has been cancelled
Go / go_tests (push) Has been cancelled
Package builds (unstable) / package_builds (push) Has been cancelled
Smoke tests / smoke-test (default-config-macro) (push) Has been cancelled
Smoke tests / smoke-test (docker-registry) (push) Has been cancelled
Smoke tests / smoke-test (double_slash) (push) Has been cancelled
Smoke tests / smoke-test (forced-language) (push) Has been cancelled
Smoke tests / smoke-test (git-clone) (push) Has been cancelled
Smoke tests / smoke-test (git-push) (push) Has been cancelled
Smoke tests / smoke-test (healthcheck) (push) Has been cancelled
Smoke tests / smoke-test (i18n) (push) Has been cancelled
Smoke tests / smoke-test (log-file) (push) Has been cancelled
Smoke tests / smoke-test (nginx) (push) Has been cancelled
Smoke tests / smoke-test (palemoon/amd64) (push) Has been cancelled
Smoke tests / smoke-test (robots_txt) (push) Has been cancelled
Check Spelling / Check Spelling (push) Has been cancelled
SSH CI / ssh (aarch64-16k) (push) Has been cancelled
SSH CI / ssh (aarch64-4k) (push) Has been cancelled
SSH CI / ssh (ppc64le) (push) Has been cancelled
SSH CI / ssh (riscv64) (push) Has been cancelled
zizmor / zizmor latest via PyPI (push) Has been cancelled
This commit is contained in:
parent
d2205b11a7
commit
896858e027
332 changed files with 1482 additions and 33742 deletions
|
|
@ -1,24 +0,0 @@
|
|||
# The URL of the service that Anubis should forward valid requests to. Supports
|
||||
# Unix domain sockets.
|
||||
#ANUBIS_TARGET="http://localhost:3923"
|
||||
#ANUBIS_TARGET="unix:///path/to/socket"
|
||||
|
||||
# The network address that Anubis listens on.
|
||||
#
|
||||
# If unset, listen on /run/anubis_${instance}/anubis.sock Unix socket instead.
|
||||
#ANUBIS_BIND_PORT=":8923"
|
||||
|
||||
# The network address that Anubis serves Prometheus metrics on.
|
||||
#
|
||||
# If unset, listen on /run/anubis_${instance}/metrix.sock Unix socket instead.
|
||||
#ANUBIS_METRICS_BIND_PORT=":9090"
|
||||
|
||||
# The difficulty of the challenge, or the number of leading zeroes that must be
|
||||
# in successful responses.
|
||||
#ANUBIS_DIFFICULTY=4
|
||||
|
||||
# Additional command-line options for Anubis.
|
||||
#ANUBIS_OPTS=""
|
||||
|
||||
# Configure the user[:group] Anubis will run as.
|
||||
#command_user="anubis:anubis"
|
||||
|
|
@ -1,35 +0,0 @@
|
|||
#!/sbin/openrc-run
|
||||
# shellcheck shell=sh
|
||||
|
||||
instance=${RC_SVCNAME#*.}
|
||||
|
||||
description="Anubis HTTP defense proxy (instance ${instance})"
|
||||
supervisor="supervise-daemon"
|
||||
command="/usr/bin/anubis"
|
||||
command_args="\
|
||||
-bind ${ANUBIS_BIND_PORT:-/run/anubis_${instance?}/anubis.sock -bind-network unix} \
|
||||
-metrics-bind ${ANUBIS_METRICS_BIND_PORT:-/run/anubis_${instance?}/metrics.sock -metrics-bind-network unix} \
|
||||
-target ${ANUBIS_TARGET:-http://localhost:3923} \
|
||||
-difficulty ${ANUBIS_DIFFICULTY:-4} \
|
||||
${ANUBIS_OPTS}
|
||||
"
|
||||
command_background=1
|
||||
pidfile="/run/anubis_${instance?}/anubis.pid"
|
||||
|
||||
: "${command_user:=anubis:anubis}"
|
||||
|
||||
depend() {
|
||||
use net firewall
|
||||
}
|
||||
|
||||
start_pre() {
|
||||
if [ "${instance?}" = "${RC_SVCNAME?}" ]; then
|
||||
eerror "${RC_SVCNAME?} cannot be started directly. You must create"
|
||||
eerror "symbolic links to it for the services you want to start"
|
||||
eerror "and add those to the appropriate runlevels."
|
||||
return 1
|
||||
fi
|
||||
|
||||
rm -rf "/run/anubis_${instance?}"
|
||||
checkpath -D -o "${command_user?}" "/run/anubis_${instance?}"
|
||||
}
|
||||
24
run/openrc/nuke.confd
Normal file
24
run/openrc/nuke.confd
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
# The URL of the service that Nuke should forward valid requests to. Supports
|
||||
# Unix domain sockets.
|
||||
#NUKE_TARGET="http://localhost:3923"
|
||||
#NUKE_BIND_PORT_TARGET="unix:///path/to/socket"
|
||||
|
||||
# The network address that Nuke listens on.
|
||||
#
|
||||
# If unset, listen on /run/nuke_${instance}/nuke.sock Unix socket instead.
|
||||
#NUKE_BIND_PORT=":8923"
|
||||
|
||||
# The network address that Nuke serves Prometheus metrics on.
|
||||
#
|
||||
# If unset, listen on /run/nuke_${instance}/metrix.sock Unix socket instead.
|
||||
#NUKE_METRICS_BIND_PORT=":9090"
|
||||
|
||||
# The difficulty of the challenge, or the number of leading zeroes that must be
|
||||
# in successful responses.
|
||||
#NUKE_DIFFICULTY=4
|
||||
|
||||
# Additional command-line options for Nuke.
|
||||
#NUKE_OPTS=""
|
||||
|
||||
# Configure the user[:group] Nuke will run as.
|
||||
#command_user="nuke:nuke"
|
||||
35
run/openrc/nuke.initd
Executable file
35
run/openrc/nuke.initd
Executable file
|
|
@ -0,0 +1,35 @@
|
|||
#!/sbin/openrc-run
|
||||
# shellcheck shell=sh
|
||||
|
||||
instance=${RC_SVCNAME#*.}
|
||||
|
||||
description="Nuke HTTP defense proxy (instance ${instance})"
|
||||
supervisor="supervise-daemon"
|
||||
command="/usr/bin/nuke"
|
||||
command_args="\
|
||||
-bind ${NUKE_BIND_PORT:-/run/nuke_${instance?}/nuke.sock -bind-network unix} \
|
||||
-metrics-bind ${NUKE_METRICS_BIND_PORT:-/run/nuke_${instance?}/metrics.sock -metrics-bind-network unix} \
|
||||
-target ${NUKE_TARGET:-http://localhost:3923} \
|
||||
-difficulty ${NUKE_DIFFICULTY:-4} \
|
||||
${NUKE_OPTS}
|
||||
"
|
||||
command_background=1
|
||||
pidfile="/run/nuke_${instance?}/nuke.pid"
|
||||
|
||||
: "${command_user:=nuke:nuke}"
|
||||
|
||||
depend() {
|
||||
use net firewall
|
||||
}
|
||||
|
||||
start_pre() {
|
||||
if [ "${instance?}" = "${RC_SVCNAME?}" ]; then
|
||||
eerror "${RC_SVCNAME?} cannot be started directly. You must create"
|
||||
eerror "symbolic links to it for the services you want to start"
|
||||
eerror "and add those to the appropriate runlevels."
|
||||
return 1
|
||||
fi
|
||||
|
||||
rm -rf "/run/nuke_${instance?}"
|
||||
checkpath -D -o "${command_user?}" "/run/nuke_${instance?}"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue