sneak commented on issue sneak/smallwebwaf#217 2026-11-08 15:00:46 +01:00
replace json files on disk with sqlite

any table not joined with other tables gets its own sqlite file.

no json in the db. normalize it properly.

why are we doing write intervals? can we not write in realtime in a dedicated…

sneak commented on issue sneak/smallwebwaf#213 2026-11-08 14:52:11 +01:00
symbol names audit

run a fable on a primary to do its own analysis independent of this one. post it here.

sneak closed issue sneak/smallwebwaf#194 2026-11-07 13:41:02 +01:00
Ban a client that makes many requests and then moves many bytes
sneak commented on issue sneak/smallwebwaf#194 2026-11-07 13:41:02 +01:00
Ban a client that makes many requests and then moves many bytes

this is cancelled for now, i don’t like the naming and i don’t like the arbitrary 2000 figure

sneak commented on issue sneak/smallwebwaf#211 2026-11-07 13:34:29 +01:00
config should use viper everywhere

review this now with fable

sneak commented on issue sneak/smallwebwaf#216 2026-11-07 13:33:32 +01:00
docker images inherit labels from ubuntu that are wrong

fix this now with opus. small change, shouldn’t need a review, let CI handle testing, no need to build it yourself. i’ll merge, not you

sneak commented on issue sneak/smallwebwaf#217 2026-11-07 13:32:35 +01:00
replace json files on disk with sqlite

begin this now with opus. show me a detailed spec for the change (all table schema, module exported api shape) for approval before implementation

sneak commented on issue sneak/smallwebwaf#220 2026-11-07 13:31:25 +01:00
question: should one app's false-positive fixes weaken the checks for every other app on the same paths?

stop after review pass before merge, for my review

sneak commented on issue sneak/smallwebwaf#222 2026-11-07 13:29:52 +01:00
Image build prints update-alternatives man page warnings

do this now with deepseek

sneak commented on pull request sneak/smallwebwaf#219 2026-11-07 06:46:57 +01:00
Read every setting through viper (closes #211)

rework:

swwaf_ becomes sww_ and 'servewaf' becomes simply 'waf'.

rproxy config keys should be prefixed with SWW_RPROXY_ and the discriminator ones are SWW_WAF_.

sneak commented on issue sneak/smallwebwaf#220 2026-11-07 06:44:08 +01:00
question: should one app's false-positive fixes weaken the checks for every other app on the same paths?

SWW_APPS is fine because it doesn't need to describe the format of the value, just be appropriately named for what it contains. it indeed contains a list of the apps it is responsible for.

wild…

sneak pushed to master at sneak/hacks 2026-11-07 06:25:42 +01:00
99322710cb ipabusedb-docker-reporter: log every command before exec
sneak commented on issue sneak/rtnetmon#17 2026-11-07 06:22:30 +01:00
Re-vendor the canonical files from sneak/prompts at dd4027b

i think each repo should have a scripts/update-policy that fetches them from their known urls on gitea and then adds/commits them and pushes, that way updating a repo is a single command.

sneak commented on issue sneak/smallwebwaf#220 2026-11-07 06:21:33 +01:00
question: should one app's false-positive fixes weaken the checks for every other app on the same paths?

well, the discriminator is going to be deciding for several sites, and we need a way of specifying it per-hostname.

what do you think of

sneak commented on pull request sneak/smallwebwaf#221 2026-11-07 06:19:12 +01:00
Rename the program to sww and its deciding daemon to discriminator (closes #218)

@clawbot have deepseek rework this now, and continue with the reviews/rework until this is merge ready

sneak commented on pull request sneak/smallwebwaf#219 2026-11-07 06:17:15 +01:00
Read every setting through viper (closes #211)

@clawbot fix now

sneak commented on pull request sneak/smallwebwaf#219 2026-11-07 06:17:06 +01:00
Read every setting through viper (closes #211)

also fix the conflict

sneak commented on pull request sneak/smallwebwaf#219 2026-11-07 06:17:00 +01:00
Read every setting through viper (closes #211)

// invalid is an error that names it. Since rproxy never touches disk, its settings have no _FILE form.

this is wrong. a docker administrator may well map a file containing a setting into…

sneak pushed to master at sneak/hacks 2026-11-07 05:44:21 +01:00
e69352606b ipabusedb-docker-reporter: log startup and next report time