b8788c239e
MCP Docker / build-and-push (push) Has been cancelled
- Remove telemetry: disabled all phone-home (installation notify, false positives, behavior tracking, upgrade tips) - Version branding: removed 'ce-' prefix, product name changed to '长亭雷池 WAF' - Detection engine enhancement: strict preset enables all 17 modules with aggressive configs - Multi-user RBAC: admin/operator/viewer roles with password + TOTP 2FA - Rate limiting: nginx limit_req per website (RPS, burst, action) - JS Challenge: browser fingerprint verification page with cookie-based bypass - Security fixes: removed InsecureSkipVerify, hardcoded credentials, NO_AUTH backdoor
17 lines
443 B
YAML
17 lines
443 B
YAML
# develop use only. For production, refer to `package/build/mgt-api/webserver/config.yml`
|
|
log:
|
|
output: stdout # "stdout", "stderr" or file path
|
|
level: debug # "debug", "info", "warn" or "error"
|
|
server:
|
|
listen_addr: :9001
|
|
dev_mode: true
|
|
db:
|
|
url: postgres://safeline-ce:safeline-ce@127.0.0.1/safeline-ce
|
|
log_sql: false
|
|
detector:
|
|
addr: ""
|
|
fsl_bytecode: fvm/bytecode
|
|
grpc_server:
|
|
listen_addr: :9002
|
|
|