5 Commits

Include renames

Author	SHA1	Message	Date
clawbot	4d4ae61abf	Rename the settings whose names do not say what they control (closes #234) ... Applies the setting renames of the naming audit under the SWW_WAF_ and SWW_RPROXY_ prefixes, with sneak's names for the IP reputation cache time and the two time limits, which now take milliseconds. The rproxy log field default_disposition becomes waf_backend_no_answer, and config.Config and config.FromEnvironment become config.WAF and config.WAFFromEnvironment. Go fields, test names and prose follow. No aliases; nothing reads the old names. Model: opus-5-5	2026-11-12 09:48:09 +00:00
clawbot	0cb6dded98	Read every setting through viper and rename the settings (closes #211) ... Every setting of waf and rproxy is read through viper, in place of the os.LookupEnv function Main passed down. NewViper turns AutomaticEnv and AllowEmptyEnv on, so a setting that is set but empty reads as set. A setting may also be given as a file, the _FILE form, which rproxy's settings now have too; rproxy still writes nothing to disk. The settings are renamed: waf's take the prefix SWW_WAF_, rproxy's take SWW_RPROXY_, and the shared SWW_COMMAND keeps SWW_. The Core Rule Set's settings take SWW_WAF_CORE_RULE_SET_ rather than SWW_WAF_WAF_. Model: deepseek-v4-pro (first version); opus-5-5 (rework)	2026-11-12 05:43:47 +01:00
clawbot	4b62bc84ce	SWW_APPS: an app's Core Rule Set fixes apply only to the hostnames that serve it (closes #220) ... Each app's fixes are one .conf file and one entry in apps. They apply only while Inspect has set the app's transaction variable, such as tx.app_gitea. SWW_APPS names each hostname's apps. A hostname gets only its apps' fixes; while SWW_APPS is unset, every hostname gets every app's fixes. Listing forgejo, a fork of gitea, brings gitea's fixes too. A hostname in SWW_APPS that is not a DNS name, such as *.example.com, stops the start. Unset, SWW_APPS is logged at start as null; set empty, as "". Model: opus-5-5	2026-11-12 03:15:16 +01:00
clawbot	0b23352767	Format Go with gofmt, then golines -m 77 (closes #215) ... script/fmt now runs golines -m 77 after gofmt, repeating golines until it changes nothing, since one pass can leave a line the next splits. script/fmt-check fails when either would change a file. script/bootstrap installs golines v0.13.0 with go install, pinned to its commit, and checks the installed version with go version -m. The tree is reformatted. The longer lines this makes are fixed by hand: nolint directives moved onto their own line above the statement, one string split, and 20 functions over funlen's 80 lines shortened or split, RunWAF and limitPercentages among them. Model: opus-5-5	2026-11-11 17:29:12 +01:00
clawbot	63e58e326b	Settings code: one file per daemon (closes #227) ... internal/config now keeps waf's settings in waf.go and rproxy's in rproxy.go. config.go keeps what both read: the package doc, SWW_COMMAND, the environment reader, listen addresses, sizes and netblock lists. The app URL reader and the default trusted proxies, which only rproxy uses, move to rproxy.go. config_test.go becomes waf_test.go, beside rproxy_test.go. Code is moved, not changed. Model: opus-5-5	2026-11-11 15:59:37 +01:00