b8788c239e
MCP Docker / build-and-push (push) Has been cancelled
- Remove telemetry: disabled all phone-home (installation notify, false positives, behavior tracking, upgrade tips) - Version branding: removed 'ce-' prefix, product name changed to '长亭雷池 WAF' - Detection engine enhancement: strict preset enables all 17 modules with aggressive configs - Multi-user RBAC: admin/operator/viewer roles with password + TOTP 2FA - Rate limiting: nginx limit_req per website (RPS, burst, action) - JS Challenge: browser fingerprint verification page with cookie-based bypass - Security fixes: removed InsecureSkipVerify, hardcoded credentials, NO_AUTH backdoor
21 lines
660 B
Go
21 lines
660 B
Go
package model
|
|
|
|
// WebsiteConfig is supposed to be same with webserver/model/website.go
|
|
type WebsiteConfig struct {
|
|
Id int `json:"id"`
|
|
ServerNames []string `json:"server_names"`
|
|
Ports []string `json:"ports"`
|
|
Upstreams []string `json:"upstreams"`
|
|
CertFilename string `json:"cert_filename"`
|
|
KeyFilename string `json:"key_filename"`
|
|
|
|
// Rate limiting
|
|
RateLimitEnabled bool `json:"rate_limit_enabled"`
|
|
RateLimitRPS int `json:"rate_limit_rps"`
|
|
RateLimitBurst int `json:"rate_limit_burst"`
|
|
RateLimitAction string `json:"rate_limit_action"`
|
|
|
|
// JS Challenge
|
|
ChallengeEnabled bool `json:"challenge_enabled"`
|
|
}
|