secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
master
secubox-deb/packages/secubox-haproxy
History
CyberMind-FR 940aa64fcf feat(haproxy,torrent): declarative per-vhost waf_bypass + durable torrent exposure (ref #917) 
haproxyctl: honour an opt-in `waf_bypass = true` field per vhost so the
generator emits `use_backend <backend>` (nginx_vhosts) instead of forcing
mitmproxy_inspector under waf_enabled. Makes the WAF-bypass of media/large-
upload services (nc/photoprism/matrix/torrent) declarative, auditable and
regen-durable instead of fragile hand-edits of the generated haproxy.cfg.
Normal vhosts are unaffected (verified in isolation).

secubox-torrent postinst: register torrent.<host>.<suffix> in haproxy.toml
(backend=nginx_vhosts, waf_bypass=true, ssl=true) idempotently and run a
drift-guarded `haproxyctl generate` — which refuses safely on a board that
still has un-migrated hand-edit vhosts (live cfg untouched) and succeeds on a
fresh board. Torrent bypasses sbxwaf by design, so no sbxwaf route is needed.

CLAUDE.md: WAF-bypass section updated — default stays 'never bypass'; the ONLY
sanctioned exception is the declarative waf_bypass=true in haproxy.toml, never
a hand-edit of the generated cfg.

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-28 19:38:59 +02:00
..
api
debian release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
errors
menu.d
nginx
sbin feat(haproxy,torrent): declarative per-vhost waf_bypass + durable torrent exposure (ref #917) 2026-07-28 19:38:59 +02:00
tests
www/haproxy feat(webui): fleet reskin — apply hybrid-dark cyan overlay to all 116 crt-light panels 2026-07-10 08:40:10 +02:00
README.md

README.md

⚡ HAProxy

Load balancer with TLS 1.3

Category: Network

Screenshot

HAProxy

Features

  • Backend management
  • Stats
  • ACLs
  • SSL termination
  • Health checks

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-haproxy

Configuration

Configuration file: /etc/secubox/haproxy.toml

API Endpoints

  • GET /api/v1/haproxy/status - Module status
  • GET /api/v1/haproxy/health - Health check

License

LicenseRef-CMSD-1.0 (Source-Disclosed License) — CyberMind © 2024-2026. See LICENCE-CMSD-1.0.md.