mirror of https://github.com/Aidaho12/haproxy-wi
parent
e0424af2e7
commit
8c9b471363
15
app/funct.py
15
app/funct.py
|
@ -1,4 +1,4 @@
|
|||
# -*- coding: utf-8 -*-"
|
||||
# -*- coding: utf-8 -*-
|
||||
import cgi
|
||||
import os, sys
|
||||
|
||||
|
@ -455,8 +455,8 @@ def waf_install(serv, **kwargs):
|
|||
os.system("rm -f %s" % script)
|
||||
|
||||
stderr = ssh_command(serv, commands, print_out="1")
|
||||
if stderr is None:
|
||||
sql.insert_waf_metrics_enable(serv, "0")
|
||||
|
||||
sql.insert_waf_metrics_enable(serv, "0")
|
||||
|
||||
|
||||
def install_nginx(serv):
|
||||
|
@ -960,4 +960,11 @@ def check_group(group, role_id):
|
|||
return True
|
||||
else:
|
||||
logging('localhost', ' has tried to actions in not own group ', haproxywi=1, login=1)
|
||||
return False
|
||||
return False
|
||||
|
||||
|
||||
def check_service(serv, service_name):
|
||||
commands = [ "systemctl status "+service_name+" |grep Active |awk '{print $1}'" ]
|
||||
return ssh_command(serv, commands)
|
||||
|
||||
|
|
@ -690,6 +690,10 @@ if form.getvalue('master'):
|
|||
|
||||
if ssh_enable == 0:
|
||||
ssh_key_name = ''
|
||||
|
||||
servers = sql.select_servers(server=master)
|
||||
for server in servers:
|
||||
ssh_port = str(server[10])
|
||||
|
||||
if proxy is not None and proxy != '' and proxy != 'None':
|
||||
proxy_serv = proxy
|
||||
|
@ -706,7 +710,7 @@ if form.getvalue('master'):
|
|||
funct.install_nginx(master)
|
||||
funct.install_nginx(slave)
|
||||
|
||||
commands = [ "chmod +x "+script +" && ./"+script +" PROXY=" + proxy_serv+
|
||||
commands = [ "chmod +x "+script +" && ./"+script +" PROXY=" + proxy_serv+" SSH_PORT="+ssh_port+
|
||||
" ETH="+ETH+" IP="+str(IP)+" MASTER=MASTER"+" SYN_FLOOD="+syn_flood+" HOST="+str(master)+
|
||||
" USER="+str(ssh_user_name)+" PASS="+str(ssh_user_password)+" KEY="+str(ssh_key_name) ]
|
||||
|
||||
|
@ -733,8 +737,12 @@ if form.getvalue('master'):
|
|||
|
||||
if ssh_enable == 0:
|
||||
ssh_key_name = ''
|
||||
|
||||
commands = [ "chmod +x "+script +" && ./"+script +" PROXY=" +proxy_serv+
|
||||
|
||||
servers = sql.select_servers(server=slave)
|
||||
for server in servers:
|
||||
ssh_port = str(server[10])
|
||||
|
||||
commands = [ "chmod +x "+script +" && ./"+script +" PROXY=" +proxy_serv+" SSH_PORT="+ssh_port+
|
||||
" ETH="+ETH+" IP="+IP+" MASTER=BACKUP"+" HOST="+str(slave)+
|
||||
" USER="+str(ssh_user_name)+" PASS="+str(ssh_user_password)+" KEY="+str(ssh_key_name) ]
|
||||
|
||||
|
|
|
@ -83,7 +83,7 @@
|
|||
|
||||
|
||||
- name: Disble SELINUX in env
|
||||
shell: setenforce 0
|
||||
shell: setenforce 0 2> /dev/null
|
||||
ignore_errors: yes
|
||||
debugger: never
|
||||
|
||||
|
|
|
@ -62,7 +62,7 @@
|
|||
ignore_errors: yes
|
||||
|
||||
- name: Disble SELINUX in env
|
||||
shell: setenforce 0
|
||||
shell: setenforce 0 2> /dev/null
|
||||
ignore_errors: yes
|
||||
debugger: never
|
||||
|
||||
|
|
|
@ -65,7 +65,7 @@
|
|||
ignore_errors: yes
|
||||
|
||||
- name: Disble SELINUX in env
|
||||
shell: setenforce 0
|
||||
shell: setenforce 0 2> /dev/null
|
||||
ignore_errors: yes
|
||||
debugger: never
|
||||
|
||||
|
|
|
@ -143,6 +143,8 @@ sudo sed -i 's/#SecAction/SecAction/' $HAPROXY_PATH/waf/rules/modsecurity_crs_10
|
|||
sudo sed -i 's/SecRuleEngine DetectionOnly/SecRuleEngine On/' $HAPROXY_PATH/waf/modsecurity.conf
|
||||
sudo sed -i 's/SecAuditLogParts ABIJDEFHZ/SecAuditLogParts ABIJDEH/' $HAPROXY_PATH/waf/modsecurity.conf
|
||||
sudo rm -f /tmp/owasp.tar.gz
|
||||
sudo rm -f /tmp/owasp-modsecurity-crs-2.2.9
|
||||
sudo rm -f /tmp/haproxy-$VERSION
|
||||
|
||||
sudo bash -c cat << EOF > /tmp/waf.service
|
||||
[Unit]
|
||||
|
|
Loading…
Reference in New Issue