secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix(metablogizer): publishctl uses real haproxyctl signature (vhost add <domain> <backend>; remove)

Browse Source 
Live verification on gk2 showed 'haproxyctl vhost add <domain>' errors (needs
<backend>); route the host to mitmproxy_inspector (=sbxwaf). vhost del -> remove.

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
This commit is contained in:
CyberMind-FR 2026-07-11 13:45:57 +02:00
parent 983c6dd1de
commit ca166762fb
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
packages/secubox-metablogizer/sbin/secubox-publishctl
View File

@ -49,8 +49,12 @@ PY
vhost_add() {
local domain="$1"; valid_domain "$domain" || die "invalid domain"
# haproxyctl signature: `vhost add <domain> <backend> [ssl]`. Route every
# published host to the WAF backend (mitmproxy_inspector = sbxwaf) — never a
# bypass. On gk2 this is belt-and-braces (https-in already default_backends
# to mitmproxy_inspector); for a custom domain it adds the explicit ACL.
local out
if out=$(haproxyctl vhost add "$domain" 2>&1); then
if out=$(haproxyctl vhost add "$domain" mitmproxy_inspector 2>&1); then
emit true "vhost $domain"
elif printf '%s' "$out" | grep -qiE 'exist|already'; then
emit true "vhost $domain (exists)"
@ -71,7 +75,7 @@ tmp = path + ".tmp"; json.dump(data, open(tmp,"w"), indent=2, sort_keys=True); o
PY
} || die "route write failed"
local out
if out=$(haproxyctl vhost del "$domain" 2>&1); then
if out=$(haproxyctl vhost remove "$domain" 2>&1); then
reload_sbxwaf
emit true "removed $domain"
elif printf '%s' "$out" | grep -qiE 'exist|absent|not found|no such|unknown'; then