Binbim
b8788c239e
MCP Docker / build-and-push (push) Has been cancelled
- Remove telemetry: disabled all phone-home (installation notify, false positives, behavior tracking, upgrade tips) - Version branding: removed 'ce-' prefix, product name changed to '长亭雷池 WAF' - Detection engine enhancement: strict preset enables all 17 modules with aggressive configs - Multi-user RBAC: admin/operator/viewer roles with password + TOTP 2FA - Rate limiting: nginx limit_req per website (RPS, burst, action) - JS Challenge: browser fingerprint verification page with cookie-based bypass - Security fixes: removed InsecureSkipVerify, hardcoded credentials, NO_AUTH backdoor
15 lines
577 B
YAML
15 lines
577 B
YAML
version: '3.8'
|
|
|
|
services:
|
|
mcp_server:
|
|
image: chaitin/safeline-mcp:latest
|
|
container_name: mcp_server
|
|
restart: always
|
|
ports:
|
|
- "5678:5678"
|
|
environment:
|
|
- SAFELINE_SECRET=your_secret_key # optional, if you want to use secret key to authenticate
|
|
- SAFELINE_ADDRESS=https://your_safeline_ip:9443 # required, your SafeLine WAF address
|
|
- SAFELINE_API_TOKEN=your_safeline_api_token # required, your SafeLine WAF api token
|
|
- LISTEN_PORT=5678 # optional, default is 5678
|
|
- LISTEN_ADDRESS=0.0.0.0 # optional, default is 0.0.0.0 |