Binbim
b8788c239e
MCP Docker / build-and-push (push) Has been cancelled
- Remove telemetry: disabled all phone-home (installation notify, false positives, behavior tracking, upgrade tips) - Version branding: removed 'ce-' prefix, product name changed to '长亭雷池 WAF' - Detection engine enhancement: strict preset enables all 17 modules with aggressive configs - Multi-user RBAC: admin/operator/viewer roles with password + TOTP 2FA - Rate limiting: nginx limit_req per website (RPS, burst, action) - JS Challenge: browser fingerprint verification page with cookie-based bypass - Security fixes: removed InsecureSkipVerify, hardcoded credentials, NO_AUTH backdoor
26 lines
1.1 KiB
Go
26 lines
1.1 KiB
Go
package model
|
|
|
|
import "gorm.io/datatypes"
|
|
|
|
type Website struct {
|
|
Base
|
|
Comment string `gorm:"comment" json:"comment"`
|
|
ServerNames datatypes.JSON `gorm:"server_names" json:"server_names"`
|
|
Ports datatypes.JSON `gorm:"ports" json:"ports"`
|
|
Upstreams datatypes.JSON `gorm:"upstreams" json:"upstreams"`
|
|
|
|
CertFilename string `gorm:"cert_filename" json:"cert_filename"`
|
|
KeyFilename string `gorm:"key_filename" json:"key_filename"`
|
|
|
|
IsEnabled bool `gorm:"is_enabled;default=true" json:"is_enabled"`
|
|
|
|
// Rate limiting (nginx limit_req)
|
|
RateLimitEnabled bool `gorm:"rate_limit_enabled;default:false" json:"rate_limit_enabled"`
|
|
RateLimitRPS int `gorm:"rate_limit_rps;default:100" json:"rate_limit_rps"`
|
|
RateLimitBurst int `gorm:"rate_limit_burst;default:200" json:"rate_limit_burst"`
|
|
RateLimitAction string `gorm:"rate_limit_action;default:reject" json:"rate_limit_action"`
|
|
|
|
// JS Challenge (human verification)
|
|
ChallengeEnabled bool `gorm:"challenge_enabled;default:false" json:"challenge_enabled"`
|
|
}
|