mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 13:59:40 +00:00
secubox-publish's infra provisioner ran as unprivileged `secubox` and tried to write /etc/nginx/sites-available/<domain>.conf, rewrite /etc/haproxy/haproxy.cfg, write /etc/secubox/waf/haproxy-routes.json, and reload nginx/haproxy/secubox-waf directly. All of these silently failed (permission denied), which was the root cause of published sites answering 421/never routing. Metablogizer already owns routing through the audited secubox-publishctl root helper (apply_route + provision_cert), so add a POST /publish/route endpoint there and have the hub call it instead of touching root config itself. Co-Authored-By: Gerald KERMA <devel@cybermind.fr> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| publish.py | ||