NgixProxy_Pathfinder/legacy/fail2ban/action.d
João Pedro cd1a164114 feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL
Major infrastructure upgrade implementing:
1. Architecture
   - Containerized NGINX with custom Alpine build (Brotli + Headers More)
   - ModSecurity WAF (OWASP CRS) as a sidecar/frontend service
   - Fail2ban service monitoring logs for bot/attack mitigation

2. SSL Automation
   - Integrated Certbot with custom daily validation scripts
   - Automatic 3-day expiry detection and renewal
   - Smart ACME challenge injection for all sites

3. Configuration
   - Migrated 28 site configs to modular structure (conf.d/)
   - Created reusable snippets (Rate Limiting, Security Maps, Caching)
   - Fixed deprecated HTTP/2 syntax and ModSecurity directives

4. Documentation
   - Added GEMINI.md with full architectural overview
   - Cleanup of legacy files
2026-01-22 13:14:18 -03:00
..
abuseipdb.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
apf.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
apprise.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
blocklist_de.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
bsd-ipfw.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
cloudflare-token.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
cloudflare.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
complain.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
dshield.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
dummy.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-allports.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-common.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-ipset.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-multiport.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-new.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-rich-logging.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
firewallcmd-rich-rules.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
helpers-common.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
hostsdeny.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
ipfilter.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
ipfw.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-allports.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-ipset-proto4.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-ipset-proto6-allports.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-ipset-proto6.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-ipset.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-multiport-log.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-multiport.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-new.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables-xt_recent-echo.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
iptables.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
ipthreat.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
mail-buffered.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
mail-whois-common.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
mail-whois-lines.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
mail-whois.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
mail.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
mynetwatchman.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
netscaler.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
nftables-allports.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
nftables-multiport.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
nftables.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
nginx-block-map.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
npf.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
nsupdate.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
osx-afctl.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
osx-ipfw.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
pf.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
route.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-buffered.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-common.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-geoip-lines.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-whois-ipjailmatches.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-whois-ipmatches.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-whois-lines.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-whois-matches.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail-whois.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
sendmail.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
shorewall-ipset-proto6.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
shorewall.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
smtp.py feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
symbiosis-blacklist-allports.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
ufw.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00
xarf-login-attack.conf feat(infra): Full migration to containerized NGINX with WAF and Auto-SSL 2026-01-22 13:14:18 -03:00