joao.goncalves
/
NgixProxy_Pathfinder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,255 Commits 3 Branches 0 Tags 6.7 MiB
Commit Graph

17 Commits

Author SHA1 Message Date
João Pedro Toledo Goncalves a537e52503 refactor: Remove PDF do cache do vHost e normaliza política de assets 2026-02-04 20:38:19 -03:00
João Pedro Toledo Goncalves 859d0851e5 feat: Implementa Cache Inteligente com SWR e Invalidação dinâmica de Assets 2026-02-04 20:19:47 -03:00
João Pedro Toledo Goncalves 5d1936e63e feat: Moderniza Cache Assets (Modern Web) e Rate-Limit Penalizado 2026-02-04 20:15:11 -03:00
João Pedro Toledo Goncalves 07bea3b949 feat: Adiciona security_actions e ativa bloqueio no vHost 2026-02-04 19:52:22 -03:00
João Pedro Toledo Goncalves 5e6d180e12 refactor: Atualiza ferreirareal.com.br para nova arquitetura Pathfinder 2026-02-04 19:45:17 -03:00
João Pedro Toledo Goncalves c4bf1050b7 refactor: usa snippets para acme e cache params 2026-01-30 12:12:34 -03:00
João Pedro Toledo Goncalves 9a855a5e12 site-ferreira-real update 2026-01-29 08:45:22 -03:00
João Pedro Toledo Goncalves f6117c9750 Add conf.d directory with placeholder 2026-01-27 14:32:44 -03:00
João Pedro Toledo Goncalves 975d6ab90b Refactor: Simplify infrastructure to single Nginx container (Legacy Removed) 2026-01-27 14:03:04 -03:00
João Pedro Toledo Goncalves 6ddf679e9c fix(modsec/nginx): disable unicode map and fix http2 warnings 2026-01-27 09:41:27 -03:00
João Pedro Toledo Goncalves 78d56417c5 fix(nginx/ssl): remove dup location and fix renew script date/empty logic 2026-01-27 09:22:49 -03:00
João Pedro Toledo Goncalves acabd1a271 chore: isolate Traccar config and fix pre-flight cleanup 2026-01-27 09:18:17 -03:00
João Pedro Toledo Goncalves d0c14b76b3 fix(nginx): replace missing ssl include with explicit params in vcenter config 2026-01-27 08:56:09 -03:00
João Pedro 1435401e44 fix(nginx): update traccar upstream port to 8083 (host exposed port) 2026-01-26 17:54:25 -03:00
João Pedro fa259fd891 feat: Add Traccar GPS configuration (Oestepan) and pending updates 2026-01-26 16:03:40 -03:00
João Pedro 0ee283eab1 feat(rede): Implementa conectividade com redes Docker internas e IPs externos 
## Tarefa 4 - Conexão Direta na Interface do Host

### Alterações no Docker Compose
- Adicionado host.docker.internal:host-gateway no modsecurity e nginx-proxy
- Permite acesso à rede física do host para alcançar IPs externos (10.10.253.x)
- Adicionados mapeamentos extras para server-254 e gitea-server

### Novos Arquivos
- snippets/docker_resolver.conf: Resolver DNS Docker para containers dinâmicos
- conf.d/test-connectivity.conf: Endpoints temporários para validar conectividade
  (REMOVER após testes no host de deploy)

### Documentação
- README.md: Diagrama de arquitetura atualizado com cores mais legíveis
- README.md: Adicionada tabela de sistemas/servidores (Docker/VM/LXC)
- TODO.md: Status da tarefa 4 atualizado para 'Aguardando Teste'

### Próximos Passos (no host de deploy)
1. docker compose build --no-cache nginx-proxy
2. docker compose down && docker compose up -d
3. Testar ping para 10.10.253.254 e 10.10.253.128
4. Remover test-connectivity.conf após validação
 2026-01-22 18:18:44 -03:00
João Pedro cd1a164114 feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 
Major infrastructure upgrade implementing:
1. Architecture
   - Containerized NGINX with custom Alpine build (Brotli + Headers More)
   - ModSecurity WAF (OWASP CRS) as a sidecar/frontend service
   - Fail2ban service monitoring logs for bot/attack mitigation

2. SSL Automation
   - Integrated Certbot with custom daily validation scripts
   - Automatic 3-day expiry detection and renewal
   - Smart ACME challenge injection for all sites

3. Configuration
   - Migrated 28 site configs to modular structure (conf.d/)
   - Created reusable snippets (Rate Limiting, Security Maps, Caching)
   - Fixed deprecated HTTP/2 syntax and ModSecurity directives

4. Documentation
   - Added GEMINI.md with full architectural overview
   - Cleanup of legacy files
 2026-01-22 13:14:18 -03:00