anubis: improve php-my-admin and mediawiki

hachino-test
Pyjacpp 2026-07-25 18:37:39 +02:00
parent 89d9bc4bc3
commit 281325c0b1
No known key found for this signature in database
GPG Key ID: ED479A5A26930939
1 changed files with 30 additions and 2 deletions

View File

@ -87,6 +87,11 @@ let
path_regex = "^/[a-zA-Z0-9_-]*/public/.*"; path_regex = "^/[a-zA-Z0-9_-]*/public/.*";
action = "ALLOW"; action = "ALLOW";
} }
{
name = "allow-phpmyadmin";
path_regex = "^/phpmyadmin/.*";
action = "ALLOW";
}
{ {
# geneau utilisait ses pages persos avant la mise en place d'Anubis. # geneau utilisait ses pages persos avant la mise en place d'Anubis.
# Le déploiement d'Anubis l'a impacté (cf les mails de fin 2025). # Le déploiement d'Anubis l'a impacté (cf les mails de fin 2025).
@ -102,7 +107,7 @@ let
} }
{ {
name = "challenge-other"; name = "challenge-other";
path_regex = "^*"; path_regex = "^.*";
action = "CHALLENGE"; action = "CHALLENGE";
} }
]; ];
@ -131,6 +136,29 @@ let
]; ];
}; };
anubisWiki = formatJSON.generate "anubis_wiki.json" {
"bots" = [
{
import = "${antiBot}";
}
{
name = "allow-mediawiki-images";
path_regex = "^/w/images/.*";
action = "ALLOW";
}
{
name = "allow-mediawiki-api";
path_regex = "^/w/api.php.*";
action = "ALLOW";
}
{
name = "challenge-other";
path_regex = ".*";
action = "CHALLENGE";
}
];
};
fetchFromCrans = fetchFromCrans =
opts: opts:
pkgs.fetchFromGitLab ( pkgs.fetchFromGitLab (
@ -230,7 +258,7 @@ in
proxyPass = "172.16.10.110"; proxyPass = "172.16.10.110";
}; };
"mediawiki" = { "mediawiki" = {
anubisConfig = "${anubisChallenge}"; anubisConfig = "${anubisWiki}";
proxyPass = "172.16.10.144"; proxyPass = "172.16.10.144";
serverAliases = [ "mediakiwi" ]; serverAliases = [ "mediakiwi" ];
}; };