smallwebwaf

94 Commits 6 Branches 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
sneak	68da92f414	Read every setting through viper and rename the settings (closes #211 ) check / check (push) Failing after 3m27s Details Every setting of discriminator and rproxy is read through viper, in place of the os.LookupEnv function Main passed down. NewViper turns AutomaticEnv and AllowEmptyEnv on, so a setting that is set but empty reads as set. A setting may also be given as a file, the _FILE form, which rproxy's settings now have too; rproxy still writes nothing to disk. The settings are renamed. Discriminator's take the prefix SWW_WAF_, rproxy's take SWW_RPROXY_, and the shared SWW_COMMAND keeps SWW_. The Core Rule Set's settings take SWW_WAF_CORE_RULE_SET_ rather than SWW_WAF_WAF_. Every place a name appeared changed: the code, the viper keys, tests, documents, examples, the README's settings table and the image files. Model: deepseek-v4-pro	2026-11-07 06:41:11 +00:00
clawbot	beb503b233	Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 ) check / check (push) Failing after 1m34s Details	2026-11-07 06:51:06 +01:00
clawbot	0797e5def2	Send every log line to a syslog server as well (closes #28 ) check / check (push) Successful in 3m3s Details With SWWAF_LOG_REMOTE_URL set (syslog+udp, syslog+tcp or syslog+tls), every line on stdout is also sent as the message of an RFC 5424 record, octet-counted over TCP and TLS, from a bounded buffer that drops its oldest line when full, so a slow or unreachable server holds up nothing. Failed connections are retried with backoff; lines sent, dropped and waiting are metrics. At a stop the lines still waiting get at most two seconds. SWWAF_LOG_REMOTE_APP_NAME defaults to SWWAF_INSTANCE_NAME; while sending, an app name RFC 5424 does not allow stops the start. Standard library only: log/syslog writes only the older format. Model: opus-5-5	2026-10-06 22:02:36 +02:00

Author

SHA1

Message

Date

sneak

68da92f414

Read every setting through viper and rename the settings (closes #211 )

check / check (push) Failing after 3m27s

Details

Every setting of discriminator and rproxy is read through viper, in place
of the os.LookupEnv function Main passed down. NewViper turns AutomaticEnv
and AllowEmptyEnv on, so a setting that is set but empty reads as set. A
setting may also be given as a file, the _FILE form, which rproxy's
settings now have too; rproxy still writes nothing to disk.

The settings are renamed. Discriminator's take the prefix SWW_WAF_,
rproxy's take SWW_RPROXY_, and the shared SWW_COMMAND keeps SWW_. The Core
Rule Set's settings take SWW_WAF_CORE_RULE_SET_ rather than SWW_WAF_WAF_.
Every place a name appeared changed: the code, the viper keys, tests,
documents, examples, the README's settings table and the image files.

Model: deepseek-v4-pro

2026-11-07 06:41:11 +00:00

clawbot

beb503b233

Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 )

check / check (push) Failing after 1m34s

Details

2026-11-07 06:51:06 +01:00

clawbot

0797e5def2

Send every log line to a syslog server as well (closes #28 )

check / check (push) Successful in 3m3s

Details

With SWWAF_LOG_REMOTE_URL set (syslog+udp, syslog+tcp or syslog+tls),
every line on stdout is also sent as the message of an RFC 5424 record,
octet-counted over TCP and TLS, from a bounded buffer that drops its
oldest line when full, so a slow or unreachable server holds up nothing.
Failed connections are retried with backoff; lines sent, dropped and
waiting are metrics. At a stop the lines still waiting get at most two
seconds. SWWAF_LOG_REMOTE_APP_NAME defaults to SWWAF_INSTANCE_NAME; while
sending, an app name RFC 5424 does not allow stops the start. Standard
library only: log/syslog writes only the older format.

Model: opus-5-5

2026-10-06 22:02:36 +02:00