Deploy model: apps build FROM the smallwebwaf image (closes #12)

Browse Source

SPEC.md and README.md now describe the recommended deploy: an app's
Dockerfile builds FROM the smallwebwaf image, and runit, started by
runsvinit, runs smallwebwaf on :8080 in front of the app on
127.0.0.1:8081, with no setting required. They cover which user each
process runs as, what happens when either exits, the health check, the
ports, the state directory and its volume, the app's trusted proxies,
the new defaults and upaas needing no change, with an example app
Dockerfile in place of the docker-compose examples. Every setting
carries the SWWAF_ prefix, and the spec no longer calls smallwebwaf a
sidecar.

Model: opus-5-5

...

This commit is contained in:

sneak

2026-09-28 23:34:48 +00:00

parent 789895782e

commit 0d81aa20df

2 changed files with 826 additions and 669 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

SPEC.md

+743 -606

File diff suppressed because it is too large Load Diff