sneak
42643be662
check / check (push) Successful in 3m13s
The program is now sww, built from cmd/sww, with two modes: sww rproxy and sww discriminator. servewaf becomes discriminator everywhere it names that daemon: the package (internal/discriminator), its types, functions, files, the discriminator_line log field, and its docs and tests. smallwebwaf is left only where sneak's directive allows it: the documents' product name, the git.eeqj.de/sneak/smallwebwaf URLs, and the Go module path sneak.berlin/go/smallwebwaf. Everywhere else a name containing it takes the sww form: the package (internal/sww), metric names (sww_*), the X-Sww-* headers, the /_sww/ admin endpoints, the OS user, and the state and rules directories. The SWWAF_ environment variables take the SWW_ form. No logic changes. make check passes. Model: deepseek-v4-pro
21 lines
814 B
Docker
21 lines
814 B
Docker
# An app built on the smallwebwaf image, as under "Deployment" in
|
|
# SPEC.md, which script/example-app builds and checks. The app is
|
|
# busybox's web server, from the nixpkgs in the image, serving one page;
|
|
# a real app copies in its own binary instead.
|
|
#
|
|
# A real app names the smallwebwaf image by digest. This one takes the
|
|
# image script/example-app has just built, or else the one `make docker`
|
|
# builds.
|
|
ARG SWW_IMAGE=smallwebwaf
|
|
FROM ${SWW_IMAGE}
|
|
|
|
# Packages the app needs, from the nixpkgs in the image.
|
|
RUN nix-env -iA nixpkgs.busybox
|
|
|
|
# The app's page, and a user of its own to run it.
|
|
RUN mkdir /var/www && echo 'hello from the example app' > /var/www/index.html
|
|
RUN useradd --system --no-create-home --shell /usr/sbin/nologin app
|
|
|
|
# The app's runit service.
|
|
COPY --chmod=755 app.run /etc/service/app/run
|