vLab-BZH/bunkerwebpoc
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Domaine bwpoc.vlab.bzh derrière le Traefik de vlab.bzh, correctif de la règle d'accès réservé (chaîne ModSecurity)

Browse Source 
Tests : 26 OK, 0 KO.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
cedricandClaude Opus 5.5 committed 2026-10-27 15:48:15 +01:00
1 parent 17d9ff4b29
commit 04c8081215
3 files changed
+5 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/bunkerweb/templates/compose.yml.j2
+1 -1
View File
@@ -69,7 +69,7 @@ services:
{% if name in poc_restricted_sites and poc_allowed_sources | length > 0 %}
# Accès réservé (poc_allowed_sources + client de test), challenge ACME toujours permis
{{ fqdn }}_CUSTOM_CONF_MODSEC_poc-allowlist: {{ val('SecRule REMOTE_ADDR "!@ipMatch ' ~ ((poc_allowed_sources + [client_ip]) | join(',')) ~ '" "id:10002,phase:1,deny,status:403,log,msg:\'PoC BunkerWeb : source non autorisee\',chain"
SecRule REQUEST_URI "!@beginsWith /.well-known/acme-challenge/"') }}
SecRule REQUEST_URI "!@beginsWith /.well-known/acme-challenge/" "t:none"') }}
{% endif %}
{% endfor %}
networks: