PoC BunkerWeb 1.6.17 : docker-compose sur Proxmox, déployé par Ansible

Stack BunkerWeb (scheduler, UI, MariaDB, Redis), sites de test (nginx,
Juice Shop, go-httpbin), filtrage DOCKER-USER, script de tests, README
et schéma d'architecture.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

examples/split/apps.compose.yml

@@ -0,0 +1,41 @@
+# Ansible managed
+# Sites de test du PoC BunkerWeb, mode split
+# Ports publiés sur 192.168.200.62, filtrés par la chaîne iptables BWPOC :
+# seul le WAF (192.168.200.61) peut les joindre.
+
+services:
+  www:
+    image: nginx:1.30-alpine
+    container_name: poc-www
+    restart: unless-stopped
+    read_only: true
+    tmpfs:
+      - /var/cache/nginx
+      - /run
+      - /tmp
+    volumes:
+      - ./www:/usr/share/nginx/html:ro
+    ports:
+      - "192.168.200.62:8081:80"
+    networks: [apps]
+
+  shop:
+    image: bkimminich/juice-shop:v20.3.0
+    container_name: poc-shop
+    restart: unless-stopped
+    ports:
+      - "192.168.200.62:8082:3000"
+    networks: [apps]
+
+  api:
+    image: mccutchen/go-httpbin:2.26.0
+    container_name: poc-api
+    restart: unless-stopped
+    read_only: true
+    ports:
+      - "192.168.200.62:8083:8080"
+    networks: [apps]
+
+networks:
+  apps:
+    name: poc-apps