Create Flex endpoint

acencyril.sentinelle-bundle.0.3.json

@@ -0,0 +1,78 @@
+{
+    "manifests": {
+        "acencyril/sentinelle-bundle": {
+            "manifest": {
+                "bundles": {
+                    "Acencyril\\SentinelleBundle\\SentinelleBundle": [
+                        "all"
+                    ]
+                },
+                "copy-from-recipe": {
+                    "config/": "%CONFIG_DIR%/"
+                },
+                "env": {
+                    "#1": "Where security alerts are sent.",
+                    "SENTINELLE_ALERT_EMAIL": "admin@example.com",
+                    "#2": "IPs or CIDRs, comma separated, that must never be blocked.",
+                    "#3": "PUT YOUR OWN OUTBOUND ADDRESS HERE before going live:",
+                    "#4": "without it, an automatic block can lock you out of your own site.",
+                    "SENTINELLE_ALLOWLIST": ""
+                },
+                "post-install-output": [
+                    "  <bg=blue;fg=white>Sentinelle is installed.</> Three things before going live:",
+                    "",
+                    "  * Set <comment>SENTINELLE_ALLOWLIST</comment> in your <comment>.env</comment> \u2014 at minimum your own",
+                    "    outbound address. Without it, an automatic block can lock you out of",
+                    "    your own site.",
+                    "",
+                    "  * Create the schema:",
+                    "      <comment>php bin/console doctrine:migrations:diff</comment>",
+                    "      <comment>php bin/console doctrine:migrations:migrate</comment>",
+                    "",
+                    "  * Check it can do its job:",
+                    "      <comment>php bin/console sentinelle:check</comment>",
+                    "",
+                    "  Sentinelle starts in <comment>dry-run</comment>: it detects, logs and alerts, but blocks",
+                    "  nothing. Watch <comment>/admin/activity</comment> for a few days, then set",
+                    "  <comment>sentinelle.dry_run</comment> to <comment>false</comment>.",
+                    "",
+                    "  And schedule the purge, without which strike counters never reset:",
+                    "      <comment>0 4 * * * php bin/console sentinelle:purge</comment>",
+                    ""
+                ]
+            },
+            "files": {
+                "config/packages/sentinelle.yaml": {
+                    "contents": [
+                        "sentinelle:",
+                        "    # Dry-run: Sentinelle detects, logs and alerts, but blocks NOTHING.",
+                        "    # Nobody wires automatic blocking into a production site without knowing",
+                        "    # what it will shut out. Watch the dashboard for a few days, ask yourself",
+                        "    # \"would I have wanted to block that one?\", then switch it off.",
+                        "    dry_run: true",
+                        "    alert:",
+                        "        recipient: '%env(SENTINELLE_ALERT_EMAIL)%'",
+                        "    access:",
+                        "        role: ROLE_ADMIN",
+                        "    never_block:",
+                        "        # At minimum your own outbound address. Private ranges are protected",
+                        "        # by default, but yours is not: one wrong move locks you out.",
+                        "        ips: '%env(default::SENTINELLE_ALLOWLIST)%'",
+                        ""
+                    ],
+                    "executable": false
+                },
+                "config/routes/sentinelle.yaml": {
+                    "contents": [
+                        "sentinelle:",
+                        "    resource: '@SentinelleBundle/config/routes.php'",
+                        "    type: php",
+                        ""
+                    ],
+                    "executable": false
+                }
+            },
+            "ref": "f8fdd404ae3f91c5c64a07c46a00a032767d006b"
+        }
+    }
+}

index.json

@@ -1,8 +1,8 @@
 {
     "aliases": [],
     "recipes": {
-        "indexnowkit/symfony-bundle": [
-            "0.15"
+        "acencyril/sentinelle-bundle": [
+            "0.3"
         ]
     },
     "recipe-conflicts": [],
@@ -12,9 +12,9 @@
     "_links": {
         "repository": "github.com/symfony/recipes-contrib",
         "origin_template": "{package}:{version}@github.com/symfony/recipes-contrib:main",
-        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2048/{package_dotted}.{version}.json",
+        "recipe_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/{package_dotted}.{version}.json",
         "recipe_template_relative": "{package_dotted}.{version}.json",
-        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2048/archived/{package_dotted}/{ref}.json",
+        "archived_recipes_template": "https://raw.githubusercontent.com/symfony/recipes-contrib/flex/pull-2040/archived/{package_dotted}/{ref}.json",
         "archived_recipes_template_relative": "archived/{package_dotted}/{ref}.json"
     }
 }

indexnowkit.symfony-bundle.0.15.json

@@ -1,54 +0,0 @@
-{
-    "manifests": {
-        "indexnowkit/symfony-bundle": {
-            "manifest": {
-                "bundles": {
-                    "IndexNowKit\\SymfonyBundle\\IndexNowKitBundle": [
-                        "all"
-                    ]
-                },
-                "copy-from-recipe": {
-                    "config/": "%CONFIG_DIR%/"
-                },
-                "env": {
-                    "#1": "The IndexNow key, served at /<key>.txt. Generate one into .env.local: bin/console indexnow:key:generate --write-env",
-                    "#2": "Empty outside production = dry run (nothing is sent); empty in production = a configuration error indexnow:check explains",
-                    "INDEXNOW_KEY": "",
-                    "#3": "The public URL of the site (console commands and Messenger workers have no request to read it from)",
-                    "INDEXNOW_BASE_URL": "https://www.example.com"
-                },
-                "post-install-output": [
-                    "  <fg=blue;options=bold>IndexNow</> is installed: search engines (Yandex, Bing, Naver, Seznam, ...) get told which pages changed.",
-                    "",
-                    "  <options=bold>Next steps:</>",
-                    "    1. Run <comment>bin/console indexnow:key:generate --write-env</> \u2014 writes <comment>INDEXNOW_KEY</> to <comment>.env.local</>",
-                    "    2. Set <comment>INDEXNOW_BASE_URL</> to the public URL of the site",
-                    "    3. Add <comment>#[IndexNow(route: '...')]</> to the entities that have a public page (needs <comment>indexnowkit/doctrine</>)",
-                    "    4. Run <comment>bin/console indexnow:check</> \u2014 it verifies the key file, the transport and the configuration",
-                    "",
-                    "  Documentation: https://github.com/indexnowkit/php/tree/main/packages/symfony-bundle"
-                ]
-            },
-            "files": {
-                "config/packages/indexnowkit.yaml": {
-                    "contents": [
-                        "indexnowkit:",
-                        "    key: '%env(INDEXNOW_KEY)%'",
-                        "    base_url: '%env(INDEXNOW_BASE_URL)%'",
-                        ""
-                    ],
-                    "executable": false
-                },
-                "config/routes/indexnowkit.yaml": {
-                    "contents": [
-                        "indexnowkit:",
-                        "    resource: '@IndexNowKitBundle/config/routes.php'",
-                        ""
-                    ],
-                    "executable": false
-                }
-            },
-            "ref": "269a7a203ca9a6b9eacadb8f4bc621b1e1481e59"
-        }
-    }
-}