Create Flex endpoint

acencyril.sentinelle-bundle.0.3.json

@@ -0,0 +1,78 @@
+{
+    "manifests": {
+        "acencyril/sentinelle-bundle": {
+            "manifest": {
+                "bundles": {
+                    "Acencyril\\SentinelleBundle\\SentinelleBundle": [
+                        "all"
+                    ]
+                },
+                "copy-from-recipe": {
+                    "config/": "%CONFIG_DIR%/"
+                },
+                "env": {
+                    "#1": "Where security alerts are sent.",
+                    "SENTINELLE_ALERT_EMAIL": "admin@example.com",
+                    "#2": "IPs or CIDRs, comma separated, that must never be blocked.",
+                    "#3": "PUT YOUR OWN OUTBOUND ADDRESS HERE before going live:",
+                    "#4": "without it, an automatic block can lock you out of your own site.",
+                    "SENTINELLE_ALLOWLIST": ""
+                },
+                "post-install-output": [
+                    "  <bg=blue;fg=white>Sentinelle is installed.</> Three things before going live:",
+                    "",
+                    "  * Set <comment>SENTINELLE_ALLOWLIST</comment> in your <comment>.env</comment> \u2014 at minimum your own",
+                    "    outbound address. Without it, an automatic block can lock you out of",
+                    "    your own site.",
+                    "",
+                    "  * Create the schema:",
+                    "      <comment>php bin/console doctrine:migrations:diff</comment>",
+                    "      <comment>php bin/console doctrine:migrations:migrate</comment>",
+                    "",
+                    "  * Check it can do its job:",
+                    "      <comment>php bin/console sentinelle:check</comment>",
+                    "",
+                    "  Sentinelle starts in <comment>dry-run</comment>: it detects, logs and alerts, but blocks",
+                    "  nothing. Watch <comment>/admin/activity</comment> for a few days, then set",
+                    "  <comment>sentinelle.dry_run</comment> to <comment>false</comment>.",
+                    "",
+                    "  And schedule the purge, without which strike counters never reset:",
+                    "      <comment>0 4 * * * php bin/console sentinelle:purge</comment>",
+                    ""
+                ]
+            },
+            "files": {
+                "config/packages/sentinelle.yaml": {
+                    "contents": [
+                        "sentinelle:",
+                        "    # Dry-run: Sentinelle detects, logs and alerts, but blocks NOTHING.",
+                        "    # Nobody wires automatic blocking into a production site without knowing",
+                        "    # what it will shut out. Watch the dashboard for a few days, ask yourself",
+                        "    # \"would I have wanted to block that one?\", then switch it off.",
+                        "    dry_run: true",
+                        "    alert:",
+                        "        recipient: '%env(SENTINELLE_ALERT_EMAIL)%'",
+                        "    access:",
+                        "        role: ROLE_ADMIN",
+                        "    never_block:",
+                        "        # At minimum your own outbound address. Private ranges are protected",
+                        "        # by default, but yours is not: one wrong move locks you out.",
+                        "        ips: '%env(default::SENTINELLE_ALLOWLIST)%'",
+                        ""
+                    ],
+                    "executable": false
+                },
+                "config/routes/sentinelle.yaml": {
+                    "contents": [
+                        "sentinelle:",
+                        "    resource: '@SentinelleBundle/config/routes.php'",
+                        "    type: php",
+                        ""
+                    ],
+                    "executable": false
+                }
+            },
+            "ref": "f8fdd404ae3f91c5c64a07c46a00a032767d006b"
+        }
+    }
+}

index.json

@@ -1,8 +1,8 @@
 {
     "aliases": [],
     "recipes": {
-        "webowi/symfony-monitoring-bundle": [
+        "acencyril/sentinelle-bundle": [
-            "0.1"
+            "0.3"
         ]
     },
     "recipe-conflicts": [],
@@ -12,9 +12,9 @@
     "_links": {
         "repository": "github.com/symfony/recipes-contrib",
         "origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
-        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2017/{package_dotted}.{version}.json",
+        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/{package_dotted}.{version}.json",
         "recipe_template_relative": "{package_dotted}.{version}.json",
-        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2017/archived/{package_dotted}/{ref}.json",
+        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/archived/{package_dotted}/{ref}.json",
         "archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
     }
 }

webowi.symfony-monitoring-bundle.0.1.json

@@ -1,49 +0,0 @@
-{
-    "manifests": {
-        "webowi/symfony-monitoring-bundle": {
-            "manifest": {
-                "bundles": {
-                    "Webowi\\SymfonyMonitoringBundle\\SymfonyMonitoringBundle": [
-                        "all"
-                    ]
-                },
-                "copy-from-recipe": {
-                    "config/": "%CONFIG_DIR%/"
-                },
-                "env": {
-                    "MONITORING_WEBOWI_URL": "",
-                    "MONITORING_WEBOWI_API_KEY": ""
-                },
-                "post-install-output": [
-                    "A config/packages/symfony_monitoring.yaml file has been added with placeholder values.",
-                    "",
-                    "Set the MONITORING_WEBOWI_URL and MONITORING_WEBOWI_API_KEY environment variables,",
-                    "or edit the file directly, using the url and api_key from your Monitoring Webowi",
-                    "project's ingestion-key page (GET /api/v1/projects/{uuid}/ingestion-key).",
-                    "",
-                    "Running this app in Docker? 'localhost' inside your app's container does not reach",
-                    "a Monitoring Webowi instance running in a sibling container/stack. Use",
-                    "http://host.docker.internal:<port>/... (Docker Desktop on Mac/Windows) instead,",
-                    "or the instance's container/service name if both stacks share a Docker network.",
-                    "",
-                    "No further wiring is needed \u2014 this bundle registers its own Monolog handler chain."
-                ]
-            },
-            "files": {
-                "config/packages/symfony_monitoring.yaml": {
-                    "contents": [
-                        "# Get your project's url and api_key from your Monitoring Webowi project's ingestion-key page",
-                        "# (GET /api/v1/projects/{uuid}/ingestion-key).",
-                        "symfony_monitoring:",
-                        "    url: '%env(MONITORING_WEBOWI_URL)%'",
-                        "    api_key: '%env(MONITORING_WEBOWI_API_KEY)%'",
-                        "    level: error",
-                        ""
-                    ],
-                    "executable": false
-                }
-            },
-            "ref": "b20a13aef56929cb188150840ad43a4cd278047a"
-        }
-    }
-}