crans
/
nixos
mirror of https://gitlab.crans.org/nounous/nixos
19
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

anubis: improve php-my-admin and mediawiki

hachino-test
Pyjacpp 2026-07-25 18:37:39 +02:00
parent 89d9bc4bc3
commit 281325c0b1
No known key found for this signature in database
GPG Key ID: ED479A5A26930939
1 changed files with 30 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
hosts/vm/reverseproxy/reverseproxy.nix
View File

@ -87,6 +87,11 @@ let
path_regex = "^/[a-zA-Z0-9_-]*/public/.*";
action = "ALLOW";
}
{
name = "allow-phpmyadmin";
path_regex = "^/phpmyadmin/.*";
action = "ALLOW";
}
{
# geneau utilisait ses pages persos avant la mise en place d'Anubis.
# Le déploiement d'Anubis l'a impacté (cf les mails de fin 2025).
@ -102,7 +107,7 @@ let
}
{
name = "challenge-other";
path_regex = "^*";
path_regex = "^.*";
action = "CHALLENGE";
}
];
@ -131,6 +136,29 @@ let
];
};
anubisWiki = formatJSON.generate "anubis_wiki.json" {
"bots" = [
{
import = "${antiBot}";
}
{
name = "allow-mediawiki-images";
path_regex = "^/w/images/.*";
action = "ALLOW";
}
{
name = "allow-mediawiki-api";
path_regex = "^/w/api.php.*";
action = "ALLOW";
}
{
name = "challenge-other";
path_regex = ".*";
action = "CHALLENGE";
}
];
};
fetchFromCrans =
opts:
pkgs.fetchFromGitLab (
@ -230,7 +258,7 @@ in
proxyPass = "172.16.10.110";
};
"mediawiki" = {
anubisConfig = "${anubisChallenge}";
anubisConfig = "${anubisWiki}";
proxyPass = "172.16.10.144";
serverAliases = [ "mediakiwi" ];
};