diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml index 443e9c6..5fbf7fb 100644 --- a/.github/workflows/package.yaml +++ b/.github/workflows/package.yaml @@ -5,7 +5,7 @@ on: push: branches: - main - - test + - sts_fix_debian_packge tags: - 'v*.*.*' @@ -46,7 +46,7 @@ jobs: sudo apt update && sudo apt -y install make pkg-config rubygems && sudo gem install fpm # Download corazawaf/coraza/coraza.conf for distribution - curl https://raw.githubusercontent.com/corazawaf/coraza/v2/master/coraza.conf-recommended > coraza.conf + curl https://raw.githubusercontent.com/corazawaf/coraza/v3.0.2/coraza.conf-recommended > coraza.conf - name: Build binary run: VERSION=${PACKAGE_VERSION} ARCH=${{ matrix.arch }} make diff --git a/contrib/coraza-spoa.service b/contrib/coraza-spoa.service index 6f618db..c58e946 100644 --- a/contrib/coraza-spoa.service +++ b/contrib/coraza-spoa.service @@ -3,14 +3,14 @@ Description=Coraza WAF SPOA Daemon Documentation=https://www.coraza.io [Service] -ExecStart=/usr/bin/coraza-spoa -config-file=/etc/coraza-spoa/config.yaml +ExecStart=/usr/bin/coraza-spoa -config=/etc/coraza-spoa/config.yaml WorkingDirectory=/ Restart=always Type=exec User=coraza-spoa Group=coraza-spoa -# Hardening +## Hardening AmbientCapabilities= MountFlags=private diff --git a/doc/config/haproxy.cfg b/doc/config/haproxy.cfg index 3dce4c8..c65707f 100644 --- a/doc/config/haproxy.cfg +++ b/doc/config/haproxy.cfg @@ -6,11 +6,11 @@ defaults log global option httplog timeout client 1m - timeout server 1m - timeout connect 10s - timeout http-keep-alive 2m - timeout queue 15s - timeout tunnel 4h # for websocket + timeout server 1m + timeout connect 10s + timeout http-keep-alive 2m + timeout queue 15s + timeout tunnel 4h # for websocket frontend test mode http