rproxy and servewaf replace the one-process smallwebwaf (closes #172, closes #165)

Browse Source

`smallwebwaf` with no command now prints the commands and exits with status 2.
The image runs rproxy, or servewaf with SMALLWEBWAF_COMMAND=servewaf. The
passing-on code, its settings and its log fields and metric go. internal/proxy
keeps the checks, answers, reports and own endpoints; its tests run through the
real rproxy. The documents describe the pair.

Judgement call: clients.json keeps token_refused, since state files refuse unknown fields.
Deviation: script/gitea-requests sets SWWAF_LOG_REQUEST_HEADERS, to label requests.

Model: opus-5-5

...

This commit is contained in:

clawbot

2026-11-05 10:33:24 +00:00

committed by sneak

parent 17c5dd2438

commit ac1a69e863

71 changed files with 2653 additions and 5493 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

SPEC.md

+417 -386

File diff suppressed because it is too large Load Diff