secubox-deb/packages/secubox-waf
CyberMind-FR e13cf925f1 fix(waf): robust route propagation — dir bind-mount + addon live-reload (closes #609)
The #603 FILE bind-mount of haproxy-routes.json binds an inode; route tools
edit via jq>tmp&&mv (new inode) so changes went stale until a container
restart (surfaced fixing git.maegia.tv mis-route). Now: wafctl uses a
DIRECTORY bind-mount (host /srv/mitmproxy -> /var/lib/secubox-waf-routes ro)
+ symlink, and the addon (both synced copies) live-reloads haproxy-routes.json
on mtime change (throttled 10s) in requestheaders -> route edits apply with
NO restart. Verified live: jq+mv add -> live-reloaded 256 routes, 0 restart.
2026-06-15 18:25:56 +02:00
..
api perf(waf): double-buffered cache for /waf/stats (memory + disk) with incremental log reading (closes #509) 2026-06-10 08:39:57 +02:00
config feat(/data Phase 1): migrate 5 core packages from /srv to /data with postinst auto-mv (closes #319 Phase 1) (#320) 2026-05-21 16:32:41 +02:00
debian fix(waf): robust route propagation — dir bind-mount + addon live-reload (closes #609) 2026-06-15 18:25:56 +02:00
menu.d feat(navbar): consolidate to 6 charter categories + fix dropped menu entries (closes #306) (#307) 2026-05-21 10:03:05 +02:00
mitmproxy fix(waf): robust route propagation — dir bind-mount + addon live-reload (closes #609) 2026-06-15 18:25:56 +02:00
nginx feat: modular nginx config + hub roadmap + new modules 2026-03-21 20:34:01 +01:00
scripts fix(waf): robust route propagation — dir bind-mount + addon live-reload (closes #609) 2026-06-15 18:25:56 +02:00
systemd feat(waf): behind-WAF media cache for hosted vhosts (closes #607) 2026-06-15 18:09:25 +02:00
tests fix(secubox-waf): apply double-cache pattern on /stats + /alerts (closes #145) (#146) 2026-05-18 08:21:17 +02:00
www feat: wg boot-survival + WAF bans/history tracking (ref #498) 2026-06-07 07:12:13 +02:00
README.md docs: Add Eye Remote Multigadget skill and wiki 2026-05-10 09:12:42 +02:00

🔥 Web Application Firewall

WAF with 300+ OWASP security rules

Category: Security

Screenshot

Web Application Firewall

Features

  • OWASP rules
  • Custom rules
  • CrowdSec integration
  • Request logging

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-waf

Configuration

Configuration file: /etc/secubox/waf.toml

API Endpoints

  • GET /api/v1/waf/status - Module status
  • GET /api/v1/waf/health - Health check

License

MIT License - CyberMind © 2024-2026