mirror of
https://github.com/symfony/recipes-contrib.git
synced 2026-09-11 23:26:40 +03:00
Compare commits
1
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 github-action[bot]andgithub-action[bot]
|
358c4178dd |
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"manifests": {
|
||||
"acencyril/sentinelle-bundle": {
|
||||
"manifest": {
|
||||
"bundles": {
|
||||
"Acencyril\\SentinelleBundle\\SentinelleBundle": [
|
||||
"all"
|
||||
]
|
||||
},
|
||||
"copy-from-recipe": {
|
||||
"config/": "%CONFIG_DIR%/"
|
||||
},
|
||||
"env": {
|
||||
"#1": "Where security alerts are sent.",
|
||||
"SENTINELLE_ALERT_EMAIL": "admin@example.com",
|
||||
"#2": "IPs or CIDRs, comma separated, that must never be blocked.",
|
||||
"#3": "PUT YOUR OWN OUTBOUND ADDRESS HERE before going live:",
|
||||
"#4": "without it, an automatic block can lock you out of your own site.",
|
||||
"SENTINELLE_ALLOWLIST": ""
|
||||
},
|
||||
"post-install-output": [
|
||||
" <bg=blue;fg=white>Sentinelle is installed.</> Three things before going live:",
|
||||
"",
|
||||
" * Set <comment>SENTINELLE_ALLOWLIST</comment> in your <comment>.env</comment> \u2014 at minimum your own",
|
||||
" outbound address. Without it, an automatic block can lock you out of",
|
||||
" your own site.",
|
||||
"",
|
||||
" * Create the schema:",
|
||||
" <comment>php bin/console doctrine:migrations:diff</comment>",
|
||||
" <comment>php bin/console doctrine:migrations:migrate</comment>",
|
||||
"",
|
||||
" * Check it can do its job:",
|
||||
" <comment>php bin/console sentinelle:check</comment>",
|
||||
"",
|
||||
" Sentinelle starts in <comment>dry-run</comment>: it detects, logs and alerts, but blocks",
|
||||
" nothing. Watch <comment>/admin/activity</comment> for a few days, then set",
|
||||
" <comment>sentinelle.dry_run</comment> to <comment>false</comment>.",
|
||||
"",
|
||||
" And schedule the purge, without which strike counters never reset:",
|
||||
" <comment>0 4 * * * php bin/console sentinelle:purge</comment>",
|
||||
""
|
||||
]
|
||||
},
|
||||
"files": {
|
||||
"config/packages/sentinelle.yaml": {
|
||||
"contents": [
|
||||
"sentinelle:",
|
||||
" # Dry-run: Sentinelle detects, logs and alerts, but blocks NOTHING.",
|
||||
" # Nobody wires automatic blocking into a production site without knowing",
|
||||
" # what it will shut out. Watch the dashboard for a few days, ask yourself",
|
||||
" # \"would I have wanted to block that one?\", then switch it off.",
|
||||
" dry_run: true",
|
||||
" alert:",
|
||||
" recipient: '%env(SENTINELLE_ALERT_EMAIL)%'",
|
||||
" access:",
|
||||
" role: ROLE_ADMIN",
|
||||
" never_block:",
|
||||
" # At minimum your own outbound address. Private ranges are protected",
|
||||
" # by default, but yours is not: one wrong move locks you out.",
|
||||
" ips: '%env(default::SENTINELLE_ALLOWLIST)%'",
|
||||
""
|
||||
],
|
||||
"executable": false
|
||||
},
|
||||
"config/routes/sentinelle.yaml": {
|
||||
"contents": [
|
||||
"sentinelle:",
|
||||
" resource: '@SentinelleBundle/config/routes.php'",
|
||||
" type: php",
|
||||
""
|
||||
],
|
||||
"executable": false
|
||||
}
|
||||
},
|
||||
"ref": "f8fdd404ae3f91c5c64a07c46a00a032767d006b"
|
||||
}
|
||||
}
|
||||
}
|
||||
+4
-4
@@ -1,8 +1,8 @@
|
||||
{
|
||||
"aliases": [],
|
||||
"recipes": {
|
||||
"m4n50n/oauth2-azure-bundle": [
|
||||
"0.1"
|
||||
"acencyril/sentinelle-bundle": [
|
||||
"0.3"
|
||||
]
|
||||
},
|
||||
"recipe-conflicts": [],
|
||||
@@ -12,9 +12,9 @@
|
||||
"_links": {
|
||||
"repository": "github.com/symfony/recipes-contrib",
|
||||
"origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
|
||||
"recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-1595/{package_dotted}.{version}.json",
|
||||
"recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/{package_dotted}.{version}.json",
|
||||
"recipe_template_relative": "{package_dotted}.{version}.json",
|
||||
"archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-1595/archived/{package_dotted}/{ref}.json",
|
||||
"archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/archived/{package_dotted}/{ref}.json",
|
||||
"archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1,50 +0,0 @@
|
||||
{
|
||||
"manifests": {
|
||||
"m4n50n/oauth2-azure-bundle": {
|
||||
"manifest": {
|
||||
"bundles": {
|
||||
"M4n50n\\OAuth2AzureBundle\\OAuth2AzureBundle": [
|
||||
"all"
|
||||
]
|
||||
},
|
||||
"copy-from-recipe": {
|
||||
"config/": "%CONFIG_DIR%/"
|
||||
},
|
||||
"composer-scripts": {
|
||||
"cache:clear": "symfony-cmd"
|
||||
},
|
||||
"env": {
|
||||
"AUTH_CLIEN_ID": "",
|
||||
"AUTH_CLIENT_PASS": "",
|
||||
"AUTH_TENANT": "",
|
||||
"AUTH_REDIRECT_URI": "",
|
||||
"AUTH_REDIRECT_TO_URL": false,
|
||||
"AUTH_REDIRECT_URL": ""
|
||||
},
|
||||
"gitignore": [
|
||||
".env",
|
||||
"/var/",
|
||||
"/vendor/"
|
||||
]
|
||||
},
|
||||
"files": {
|
||||
"config/packages/oauth2_azure.yaml": {
|
||||
"contents": [
|
||||
"o_auth2_azure:",
|
||||
" clientId: '%env(AUTH_CLIEN_ID)%'",
|
||||
" clientSecret: '%env(AUTH_CLIENT_PASS)%'",
|
||||
" tenant: '%env(AUTH_TENANT)%'",
|
||||
" redirectUri: '%env(AUTH_REDIRECT_URI)%'",
|
||||
"",
|
||||
" # Optional",
|
||||
" redirectToUrl: '%env(bool:AUTH_REDIRECT_TO_URL)%' # Activate redirect after authentication",
|
||||
" redirectUrl: '%env(AUTH_REDIRECT_URL)%' # URL to redirect after authentication",
|
||||
""
|
||||
],
|
||||
"executable": false
|
||||
}
|
||||
},
|
||||
"ref": "5a9d91da8b994ae18ccf3b1a609168c0b1ed0045"
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user