cclohmar/zoraxy-waf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
zoraxy-waf/.agents.md
cclohmar 16761613bb fix: redirect preservation, health check, Content-Length, UI simplification 
- health.go: treat any HTTP response as reachable (only connection errors fail)
- main.go: CheckRedirect in handleReturn to preserve 302 + Set-Cookie
- middleware.go: Content-Length for POST/PUT/PATCH bodies, CheckRedirect
  in forwardToWAF and forwardToReturn
- web/: replace stats panel with 3-state WAF indicator (DISABLED/ENABLED/FAILED)
- README: update defaults, architecture, health check docs
- .agents.md: update verified status for Wallarm integration
2026-08-08 14:53:12 +00:00

625 B
Raw Permalink Blame History

Firewall Plugin — Verified Architecture

Wallarm Integration (2026-08-08)

  • Wallarm active on 10.1.0.11:8081 — full chain working
  • Nginx requires proxy_set_header Host $http_host to preserve Host for backend routing
  • Plugin redirect preservation fixed — login Set-Cookie and 302 now pass through
  • Health check: any HTTP response = reachable (connection error only = failure)
  • UI: simplified to 3-state indicator (DISABLED / ENABLED / FAILED)

Known

  • Forgejo/Gitea login: requires redirect preservation + nginx Host header fix
  • X-Forwarded-For chain preserved through Zoraxy → Plugin → Wallarm chain