vLab-BZH/bunkerwebpoc
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Option domaine public : Let's Encrypt (poc_tls) et accès réservé par IP (poc_allowed_sources)

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
cedricandClaude Opus 5.5 committed 2026-10-27 15:32:41 +01:00
1 parent de23e19910
commit 0e5426b7c3
4 files changed
+43 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

inventory/group_vars/bunkerweb.yml
+6 -2
View File
@@ -21,8 +21,12 @@ bw_global_settings:
MULTISITE: "yes"
DISABLE_DEFAULT_SERVER: "yes" # Host inconnu = connexion fermée (444)
SERVE_FILES: "no"
# TLS : certificats auto-signés par site (pas d'ACME en labo fermé)
GENERATE_SELF_SIGNED_SSL: "yes"
# TLS : auto-signé (labo fermé) ou Let's Encrypt (domaine public), voir poc_tls
GENERATE_SELF_SIGNED_SSL: "{{ 'yes' if poc_tls == 'selfsigned' else 'no' }}"
AUTO_LETS_ENCRYPT: "{{ 'yes' if poc_tls == 'letsencrypt' else 'no' }}"
EMAIL_LETS_ENCRYPT: "{{ poc_letsencrypt_email }}"
LETS_ENCRYPT_CHALLENGE: "http"
USE_LETS_ENCRYPT_STAGING: "{{ 'yes' if poc_letsencrypt_staging | bool else 'no' }}"
AUTO_REDIRECT_HTTP_TO_HTTPS: "yes"
# WAF : ModSecurity + OWASP CRS v4 actifs partout (défaut BunkerWeb)
USE_MODSECURITY: "yes"