Stack BunkerWeb (scheduler, UI, MariaDB, Redis), sites de test (nginx, Juice Shop, go-httpbin), filtrage DOCKER-USER, script de tests, README et schéma d'architecture. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
42 lines
894 B
YAML
42 lines
894 B
YAML
# Ansible managed
|
|
# Sites de test du PoC BunkerWeb, mode split
|
|
# Ports publiés sur 192.168.200.62, filtrés par la chaîne iptables BWPOC :
|
|
# seul le WAF (192.168.200.61) peut les joindre.
|
|
|
|
services:
|
|
www:
|
|
image: nginx:1.30-alpine
|
|
container_name: poc-www
|
|
restart: unless-stopped
|
|
read_only: true
|
|
tmpfs:
|
|
- /var/cache/nginx
|
|
- /run
|
|
- /tmp
|
|
volumes:
|
|
- ./www:/usr/share/nginx/html:ro
|
|
ports:
|
|
- "192.168.200.62:8081:80"
|
|
networks: [apps]
|
|
|
|
shop:
|
|
image: bkimminich/juice-shop:v20.3.0
|
|
container_name: poc-shop
|
|
restart: unless-stopped
|
|
ports:
|
|
- "192.168.200.62:8082:3000"
|
|
networks: [apps]
|
|
|
|
api:
|
|
image: mccutchen/go-httpbin:2.26.0
|
|
container_name: poc-api
|
|
restart: unless-stopped
|
|
read_only: true
|
|
ports:
|
|
- "192.168.200.62:8083:8080"
|
|
networks: [apps]
|
|
|
|
networks:
|
|
apps:
|
|
name: poc-apps
|