Merci. Donc si je comprends "bien" comme un néophyte .... Si je redirige dans le Cpanel de l'hébergeur les DNS ne "mondomaine.com" vers ex: 8.8.8.8 et 8.8.4.4... L'adresse dans le cpanel va pointer vers le pot commun et "croiser" son homologue qui pointe vers mon Swag avec les infos du cpanel.ini ? et Bingo la chaine est faite ?
Oui... Le serveur tourne. News entre temps, grâce à l'aide d'un ami... SWAG est visible a travers mondomaine.com en redirigeant l'adresse public. Quid quand l'adresse changera ? Nouveau soucis... L'adresse mondomaine.com est en HTTPS et lors de la redirection vers l'adresse public, ça passe en HTTP .... Dans les options SSL certificate de portainer, impossible de forcer le https sans mettre des fichiers...
## /volume1/docker/fail2ban/filter.d/vaultwarden-auth.local
## See : https://github.com/dani-garcia/vaultwarden/wiki/Fail2Ban-Setup#synology-dsm
[INCLUDES]
before = common.conf
[Definition]
failregex = ^.*Username or password is incorrect\. Try again\. IP: <ADDR>\. Username:.*$
ignoreregex =## /volume1/docker/fail2ban/filter.d/vaultwarden-admin-auth.local
## See : https://github.com/dani-garcia/vaultwarden/wiki/Fail2Ban-Setup#synology-dsm
[INCLUDES]
before = common.conf
[Definition]
failregex = ^.*Invalid admin token\. IP: <ADDR>.*$
ignoreregex =Pour bloquer par IP, c'est depuis SWAG que tu pourras le faire, avec le MOD de géoblocking :
github.com
[mod-init] Running Docker Modification Logic
[mod-init] Adding linuxserver/mods:swag-auto-reload to container
[mod-init] linuxserver/mods:swag-auto-reload at sha256:9dbae5d11b0dab3c5825a700ea1933a606a81df6312186da0f167e6ed8b6039e has been previously applied skipping
[mod-init] Adding linuxserver/mods:swag-dashboard to container
[mod-init] linuxserver/mods:swag-dashboard at sha256:594c67a6b598c080f019ef64b7978d4408e451f88530293646e395d8324460a7 has been previously applied skipping
[mod-init] Adding linuxserver/mods:swag-maxmind to container
[mod-init] linuxserver/mods:swag-maxmind at sha256:bb158926d3ef7bc99993ba17f735a21b4826e1b72a89069f33a94358a2730b71 has been previously applied skipping
[mod-init] Adding themepark-dev/theme.park:swag to container
[mod-init] themepark-dev/theme.park:swag at sha256:f4d005f7c8e341fedf2bc3ed6b43d2d3781f874b42399bd1cdc9608393808c57 has been previously applied skipping
[mod-init] Adding linuxserver/mods:swag-crowdsec to container
[mod-init] linuxserver/mods:swag-crowdsec at sha256:2e9a619ae4636f656bed3d3335407dbe75b0182bd13b4cf2e9f30d737d45c5f1 has been previously applied skipping
[mod-init] Adding linuxserver/mods:universal-package-install to container
[mod-init] linuxserver/mods:universal-package-install at sha256:179666823e425c84f903183aa0b76eb4fe6ce386fdeb55ca85b56b7791669140 has been previously applied skipping
[migrations] started
[migrations] 01-nginx-site-confs-default: skipped
[migrations] done
usermod: no changes
───────────────────────────────────────
██╗ ███████╗██╗ ██████╗
██║ ██╔════╝██║██╔═══██╗
██║ ███████╗██║██║ ██║
██║ ╚════██║██║██║ ██║
███████╗███████║██║╚██████╔╝
╚══════╝╚══════╝╚═╝ ╚═════╝
Brought to you by linuxserver.io
───────────────────────────────────────
To support the app dev(s) visit:
Certbot: https://supporters.eff.org/donate/support-work-on-certbot
To support LSIO projects visit:
https://www.linuxserver.io/donate/
───────────────────────────────────────
GID/UID
───────────────────────────────────────
User UID: 1000
User GID: 65538
───────────────────────────────────────
using keys found in /config/keys
Variables set:
PUID=1000
PGID=65538
TZ=Europe/Paris
URL=srv.ndd.tld
SUBDOMAINS=wildcard
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
VALIDATION=dns
CERTPROVIDER=
DNSPLUGIN=ovh
EMAIL=xxxxxx@mail.com
STAGING=false
Using Let's Encrypt as the cert provider
SUBDOMAINS entered, processing
Wildcard cert for srv.ndd.tld will be requested
E-mail address entered: xxxxxx@mail.com
dns validation via ovh plugin is selected
Certificate exists; parameters unchanged; starting nginx
The cert does not expire within the next day. Letting the cron script handle the renewal attempts overnight (2:08am).
**** Configuring CrowdSec nginx Bouncer ****
**** Adding ssmtp to OS package install list ****
**** Applying the SWAG dashboard mod... ****
libmaxminddb
**** libmaxminddb already installed, skipping ****
**** goaccess already installed, skipping ****
**** swag-auto-reload deps already installed, skipping ****
**** libmaxminddb already installed, skipping ****
**** Applied the SWAG dashboard mod ****
**** Successfully configured CrowdSec nginx Bouncer v1.0.7 ****
[mod-init] **** Installing all mod packages ****
fetch http://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/APKINDEX.tar.gz
fetch http://dl-cdn.alpinelinux.org/alpine/v3.19/community/x86_64/APKINDEX.tar.gz
OK: 212 MiB in 238 packages
Applying the maxmind mod...
Applied the maxmind mod
-------------------------
| SWAG theme.park Mod |
-------------------------
Variables set:
'TP_BRANCH'=
No branch set, defaulting to live
[custom-init] No custom files found, skipping...
MOD Auto-reload: Watching the following files/folders for changes (excluding .sample and .md files):
/config/nginx
[ls.io-init] done.
Server ready
nginx: [error] [lua] crowdsec.lua:57: init(): error loading captcha plugin: no recaptcha site key provided, can't use recaptcha
nginx: [alert] [lua] crowdsec_nginx.conf:4):8: [Crowdsec] Initialisation done
warning: state file /config/log/logrotate.status is world-readable and thus can be locked from other unprivileged users. Skipping lock acquisition...Non, je t'avoue que mon conteneur tourne depuis pas mal de temps, donc pas fait depuis zéro depuis un bon paquet de temps...
version: '3'
services:
geoip:
container_name: geoipupdate
network_mode: swag_default
image: maxmindinc/geoipupdate:latest
restart: unless-stopped
volumes:
- /ton chemin vers container swag/Swag/config/geoip2db:/usr/share/GeoIP
environment:
TZ: "Europe/PARIS"
GEOIPUPDATE_ACCOUNT_ID: XXXXXX
GEOIPUPDATE_LICENSE_KEY: "XXXXXXXXXXXXXXXXXXXXXXX"
GEOIPUPDATE_EDITION_IDS: "GeoLite2-City GeoLite2-Country GeoLite2-ASN" # Bases à télécharger
GEOIPUPDATE_FREQUENCY: 12 # Màj toutes les 12h
GEOIPUPDATE_PRESERVE_FILE_TIMES: 1 # Conserver la date originale de création des fichiers.Concrètement il y a quoi comme plus dans les bdd supplémentaires ?
