mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 11:12:29 +00:00
The #603 FILE bind-mount of haproxy-routes.json binds an inode; route tools edit via jq>tmp&&mv (new inode) so changes went stale until a container restart (surfaced fixing git.maegia.tv mis-route). Now: wafctl uses a DIRECTORY bind-mount (host /srv/mitmproxy -> /var/lib/secubox-waf-routes ro) + symlink, and the addon (both synced copies) live-reloads haproxy-routes.json on mtime change (throttled 10s) in requestheaders -> route edits apply with NO restart. Verified live: jq+mv add -> live-reloaded 256 routes, 0 restart. |
||
|---|---|---|
| .. | ||
| api | ||
| config | ||
| debian | ||
| menu.d | ||
| mitmproxy | ||
| nginx | ||
| scripts | ||
| systemd | ||
| tests | ||
| www | ||
| README.md | ||
🔥 Web Application Firewall
WAF with 300+ OWASP security rules
Category: Security
Screenshot
Features
- OWASP rules
- Custom rules
- CrowdSec integration
- Request logging
Installation
# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
# Install package
sudo apt install secubox-waf
Configuration
Configuration file: /etc/secubox/waf.toml
API Endpoints
GET /api/v1/waf/status- Module statusGET /api/v1/waf/health- Health check
License
MIT License - CyberMind © 2024-2026
