cedricandClaude Opus 5.5
f0f61548d2
- README : noms des sites, accès via Traefik, configuration retenue sur vLab, variante BunkerWeb en frontal avec Let's Encrypt, prérequis du modèle - examples/split régénérés depuis la configuration actuelle (secrets en CHANGEME) - schéma : libellé des sites en *-bwpoc.vlab.bzh Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
42 lines
899 B
YAML
42 lines
899 B
YAML
# Ansible managed
|
|
# Sites de test du PoC BunkerWeb, mode split
|
|
# Ports publiés sur 192.168.200.161, filtrés par la chaîne iptables BWPOC :
|
|
# seul le WAF (192.168.200.155) peut les joindre.
|
|
|
|
services:
|
|
www:
|
|
image: nginx:1.30-alpine
|
|
container_name: poc-www
|
|
restart: unless-stopped
|
|
read_only: true
|
|
tmpfs:
|
|
- /var/cache/nginx
|
|
- /run
|
|
- /tmp
|
|
volumes:
|
|
- ./www:/usr/share/nginx/html:ro
|
|
ports:
|
|
- "192.168.200.161:8081:80"
|
|
networks: [apps]
|
|
|
|
shop:
|
|
image: bkimminich/juice-shop:v20.3.0
|
|
container_name: poc-shop
|
|
restart: unless-stopped
|
|
ports:
|
|
- "192.168.200.161:8082:3000"
|
|
networks: [apps]
|
|
|
|
api:
|
|
image: mccutchen/go-httpbin:2.26.0
|
|
container_name: poc-api
|
|
restart: unless-stopped
|
|
read_only: true
|
|
ports:
|
|
- "192.168.200.161:8083:8080"
|
|
networks: [apps]
|
|
|
|
networks:
|
|
apps:
|
|
name: poc-apps
|