mirror of
https://github.com/elAgala/server-initializer.git
synced 2026-02-14 05:06:18 +00:00
Add full caddy installation (Coraza WAF + Crowdsec)
- Remove security issue when exposing ports in a docker container: Use intranet instead - Modify install_caddy to use new template
This commit is contained in:
@@ -3,14 +3,24 @@
|
||||
function install_caddy() {
|
||||
|
||||
REPO_URL="https://raw.githubusercontent.com/elAgala/server-initializer/master"
|
||||
TEMPLATE_PATH="/templates/caddy"
|
||||
TEMPLATE_PATH="/templates/caddy/full"
|
||||
|
||||
username="$1"
|
||||
caddy_dir="/home/$username/caddy"
|
||||
caddy_dir="/home/$username/web-server"
|
||||
|
||||
echo "[ WEB ]: Starting Caddy setup"
|
||||
mkdir -p "$caddy_dir"
|
||||
mkdir -p "$caddy_dir/settings"
|
||||
mkdir -p "$caddy_dir/crowdsec"
|
||||
mkdir -p "$caddy_dir/caddy"
|
||||
mkdir -p "$caddy_dir/caddy/coraza"
|
||||
|
||||
wget "$REPO_URL/$TEMPLATE_PATH/docker-compose.yml" -O "$caddy_dir/docker-compose.yml"
|
||||
wget "$REPO_URL/$TEMPLATE_PATH/Caddyfile" -O "$caddy_dir/settings/Caddyfile"
|
||||
wget "$REPO_URL/$TEMPLATE_PATH/caddy/Caddyfile" -O "$caddy_dir/caddy/Caddyfile"
|
||||
wget "$REPO_URL/$TEMPLATE_PATH/caddy/coraza/coraza_rules.conf" -O "$caddy_dir/caddy/coraza/coraza_rules.conf"
|
||||
wget "$REPO_URL/$TEMPLATE_PATH/crowdsec/acquis.yaml" -O "$caddy_dir/crowdsec/acquis.yaml"
|
||||
|
||||
echo "[ WEB ]: Caddy setup succesfully. You can find the Caddyfile under /home/$username/caddy/settings"
|
||||
echo "[ WEB ]: Do not forget to update the .env file located under $caddy_dir"
|
||||
docker network create caddy_net
|
||||
echo "[ WEB ]: Created caddy intranet 'caddy_net'"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user