mirror of
https://github.com/symfony/recipes-contrib.git
synced 2026-09-11 23:26:40 +03:00
Compare commits
1
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 github-action[bot]andgithub-action[bot]
|
1c9a842880 |
@@ -1,78 +0,0 @@
|
||||
{
|
||||
"manifests": {
|
||||
"acencyril/sentinelle-bundle": {
|
||||
"manifest": {
|
||||
"bundles": {
|
||||
"Acencyril\\SentinelleBundle\\SentinelleBundle": [
|
||||
"all"
|
||||
]
|
||||
},
|
||||
"copy-from-recipe": {
|
||||
"config/": "%CONFIG_DIR%/"
|
||||
},
|
||||
"env": {
|
||||
"#1": "Where security alerts are sent.",
|
||||
"SENTINELLE_ALERT_EMAIL": "admin@example.com",
|
||||
"#2": "IPs or CIDRs, comma separated, that must never be blocked.",
|
||||
"#3": "PUT YOUR OWN OUTBOUND ADDRESS HERE before going live:",
|
||||
"#4": "without it, an automatic block can lock you out of your own site.",
|
||||
"SENTINELLE_ALLOWLIST": ""
|
||||
},
|
||||
"post-install-output": [
|
||||
" <bg=blue;fg=white>Sentinelle is installed.</> Three things before going live:",
|
||||
"",
|
||||
" * Set <comment>SENTINELLE_ALLOWLIST</comment> in your <comment>.env</comment> \u2014 at minimum your own",
|
||||
" outbound address. Without it, an automatic block can lock you out of",
|
||||
" your own site.",
|
||||
"",
|
||||
" * Create the schema:",
|
||||
" <comment>php bin/console doctrine:migrations:diff</comment>",
|
||||
" <comment>php bin/console doctrine:migrations:migrate</comment>",
|
||||
"",
|
||||
" * Check it can do its job:",
|
||||
" <comment>php bin/console sentinelle:check</comment>",
|
||||
"",
|
||||
" Sentinelle starts in <comment>dry-run</comment>: it detects, logs and alerts, but blocks",
|
||||
" nothing. Watch <comment>/admin/activity</comment> for a few days, then set",
|
||||
" <comment>sentinelle.dry_run</comment> to <comment>false</comment>.",
|
||||
"",
|
||||
" And schedule the purge, without which strike counters never reset:",
|
||||
" <comment>0 4 * * * php bin/console sentinelle:purge</comment>",
|
||||
""
|
||||
]
|
||||
},
|
||||
"files": {
|
||||
"config/packages/sentinelle.yaml": {
|
||||
"contents": [
|
||||
"sentinelle:",
|
||||
" # Dry-run: Sentinelle detects, logs and alerts, but blocks NOTHING.",
|
||||
" # Nobody wires automatic blocking into a production site without knowing",
|
||||
" # what it will shut out. Watch the dashboard for a few days, ask yourself",
|
||||
" # \"would I have wanted to block that one?\", then switch it off.",
|
||||
" dry_run: true",
|
||||
" alert:",
|
||||
" recipient: '%env(SENTINELLE_ALERT_EMAIL)%'",
|
||||
" access:",
|
||||
" role: ROLE_ADMIN",
|
||||
" never_block:",
|
||||
" # At minimum your own outbound address. Private ranges are protected",
|
||||
" # by default, but yours is not: one wrong move locks you out.",
|
||||
" ips: '%env(default::SENTINELLE_ALLOWLIST)%'",
|
||||
""
|
||||
],
|
||||
"executable": false
|
||||
},
|
||||
"config/routes/sentinelle.yaml": {
|
||||
"contents": [
|
||||
"sentinelle:",
|
||||
" resource: '@SentinelleBundle/config/routes.php'",
|
||||
" type: php",
|
||||
""
|
||||
],
|
||||
"executable": false
|
||||
}
|
||||
},
|
||||
"ref": "f8fdd404ae3f91c5c64a07c46a00a032767d006b"
|
||||
}
|
||||
}
|
||||
}
|
||||
+4
-4
@@ -1,8 +1,8 @@
|
||||
{
|
||||
"aliases": [],
|
||||
"recipes": {
|
||||
"acencyril/sentinelle-bundle": [
|
||||
"0.3"
|
||||
"webowi/symfony-monitoring-bundle": [
|
||||
"0.1"
|
||||
]
|
||||
},
|
||||
"recipe-conflicts": [],
|
||||
@@ -12,9 +12,9 @@
|
||||
"_links": {
|
||||
"repository": "github.com/symfony/recipes-contrib",
|
||||
"origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
|
||||
"recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/{package_dotted}.{version}.json",
|
||||
"recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2017/{package_dotted}.{version}.json",
|
||||
"recipe_template_relative": "{package_dotted}.{version}.json",
|
||||
"archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/archived/{package_dotted}/{ref}.json",
|
||||
"archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2017/archived/{package_dotted}/{ref}.json",
|
||||
"archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -0,0 +1,49 @@
|
||||
{
|
||||
"manifests": {
|
||||
"webowi/symfony-monitoring-bundle": {
|
||||
"manifest": {
|
||||
"bundles": {
|
||||
"Webowi\\SymfonyMonitoringBundle\\SymfonyMonitoringBundle": [
|
||||
"all"
|
||||
]
|
||||
},
|
||||
"copy-from-recipe": {
|
||||
"config/": "%CONFIG_DIR%/"
|
||||
},
|
||||
"env": {
|
||||
"MONITORING_WEBOWI_URL": "",
|
||||
"MONITORING_WEBOWI_API_KEY": ""
|
||||
},
|
||||
"post-install-output": [
|
||||
"A config/packages/symfony_monitoring.yaml file has been added with placeholder values.",
|
||||
"",
|
||||
"Set the MONITORING_WEBOWI_URL and MONITORING_WEBOWI_API_KEY environment variables,",
|
||||
"or edit the file directly, using the url and api_key from your Monitoring Webowi",
|
||||
"project's ingestion-key page (GET /api/v1/projects/{uuid}/ingestion-key).",
|
||||
"",
|
||||
"Running this app in Docker? 'localhost' inside your app's container does not reach",
|
||||
"a Monitoring Webowi instance running in a sibling container/stack. Use",
|
||||
"http://host.docker.internal:<port>/... (Docker Desktop on Mac/Windows) instead,",
|
||||
"or the instance's container/service name if both stacks share a Docker network.",
|
||||
"",
|
||||
"No further wiring is needed \u2014 this bundle registers its own Monolog handler chain."
|
||||
]
|
||||
},
|
||||
"files": {
|
||||
"config/packages/symfony_monitoring.yaml": {
|
||||
"contents": [
|
||||
"# Get your project's url and api_key from your Monitoring Webowi project's ingestion-key page",
|
||||
"# (GET /api/v1/projects/{uuid}/ingestion-key).",
|
||||
"symfony_monitoring:",
|
||||
" url: '%env(MONITORING_WEBOWI_URL)%'",
|
||||
" api_key: '%env(MONITORING_WEBOWI_API_KEY)%'",
|
||||
" level: error",
|
||||
""
|
||||
],
|
||||
"executable": false
|
||||
}
|
||||
},
|
||||
"ref": "b20a13aef56929cb188150840ad43a4cd278047a"
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user