Xor290/projet_gestion_commande
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: update

Browse Source
This commit is contained in:
Xor290
2026-06-10 22:16:09 +02:00
parent 78bd98e72f
commit 40dac3a838
5 changed files with 246 additions and 115 deletions
Download Patch File Download Diff File Expand all files Collapse all files
monitoring/security/docker-compose-security.yml
+3 -1
View File
@@ -9,7 +9,7 @@ services:
environment:
DOZZLE_AUTH_PROVIDER: simple
DOZZLE_AUTH_TTL: 48h
DOZZLE_REMOTE_AGENT: "185.103.166.112:7007|pre-prod-uber|VPS,185.103.166.119:7007|prod-uber|VPS"
DOZZLE_REMOTE_AGENT: "185.103.166.112:7007|pre-prod-uber|VPS,185.103.166.119:7007|prod-uber|VPS,10.0.0.4:7007|backup-mln|VPN"
networks:
- monitoring_net
@@ -20,6 +20,8 @@ services:
ports:
- "80:80"
- "443:443"
- "8080:8080"
- "8090:8090"
volumes:
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
- ./nginx/certs:/etc/nginx/certs:ro
monitoring/security/nginx/nginx.conf
+41 -114
View File
@@ -7,77 +7,10 @@ events {
http {
resolver 127.0.0.11 valid=10s ipv6=off;
# Redirect HTTP -> HTTPS
# ── Dozzle (8080) ───────────────────────────────────────
server {
listen 80;
listen 8080 ssl;
server_name _;
return 301 https://$host$request_uri;
}
# ── Default server (by IP + path) ────────────────────────
server {
listen 443 ssl default_server;
server_name _;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
# Root → Wazuh Dashboard
location = / {
return 301 https://$host/wazuh;
}
# /wazuh → Wazuh Dashboard
location /wazuh/ {
set $upstream https://wazuh.dashboard:5601;
proxy_pass $upstream;
proxy_ssl_verify off;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_read_timeout 300s;
proxy_hide_header Content-Security-Policy;
}
# /dozzle → Dozzle
location /dozzle/ {
set $upstream http://dozzle:8080;
proxy_pass $upstream;
proxy_http_version 1.1;
proxy_buffering off;
proxy_cache off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 3600s;
}
# /beszel → Beszel
location /beszel/ {
set $upstream http://beszel:8090;
proxy_pass $upstream;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 3600s;
}
}
# ── Dozzle ──────────────────────────────────────────────
server {
listen 443 ssl;
server_name dozzle.demo-uber.xyz;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/privkey.pem;
@@ -88,10 +21,8 @@ http {
error_log /var/log/nginx/dozzle_error.log;
location / {
set $upstream http://dozzle:8080;
proxy_pass $upstream;
proxy_pass http://dozzle:8080;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_buffering off;
proxy_cache off;
proxy_set_header Host $host;
@@ -102,47 +33,10 @@ http {
}
}
# ── Wazuh Dashboard ─────────────────────────────────────
# ── Beszel (8090) ───────────────────────────────────────
server {
listen 443 ssl;
server_name wazuh.demo-uber.xyz;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
access_log /var/log/nginx/wazuh_access.log;
error_log /var/log/nginx/wazuh_error.log;
location / {
set $upstream https://wazuh.dashboard:5601;
proxy_pass $upstream;
proxy_ssl_verify off;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_read_timeout 300s;
proxy_hide_header Content-Security-Policy;
proxy_hide_header X-Frame-Options;
proxy_hide_header X-XSS-Protection;
}
}
# ── Beszel ──────────────────────────────────────────────
server {
listen 443 ssl;
server_name beszel.demo-uber.xyz;
listen 8090 ssl;
server_name _;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/privkey.pem;
@@ -153,8 +47,7 @@ http {
error_log /var/log/nginx/beszel_error.log;
location / {
set $upstream http://beszel:8090;
proxy_pass $upstream;
proxy_pass http://beszel:8090;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
@@ -165,4 +58,38 @@ http {
proxy_read_timeout 3600s;
}
}
# ── Wazuh (443) ──────────────────────────────────────────
server {
listen 443 ssl default_server;
server_name _;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
access_log /var/log/nginx/wazuh_access.log;
error_log /var/log/nginx/wazuh_error.log;
location / {
proxy_pass https://wazuh.dashboard:5601;
proxy_ssl_verify off;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_read_timeout 300s;
}
}
# ── HTTP Redirect to HTTPS ───────────────────────────────
server {
listen 80;
server_name _;
return 301 https://$host$request_uri;
}
}