thorngate/config.json at main · timothydodd/thorngate · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
{
  "listen": ":8765",
  "client_ip_header": "Cf-Connecting-Ip",
  "blacklist_file": "/data/blacklist.json",
  "whitelist": [
    "127.0.0.1",
    "10.0.0.0/8"
  ],
  "block_action": "tarpit",
  "tarpit_duration": "100s",
  "tarpit_max": 512,
  "honeypots": [
    "/wp-admin",
    "/wp-login.php",
    { "pattern": ".php", "match": "contains" },
    { "pattern": ".env", "match": "suffix" },
    { "pattern": "/cgi-bin/*", "match": "glob" },
    { "pattern": "\\.(git|svn|hg)(/|$)", "match": "regex" },
    { "pattern": "/phpmyadmin", "match": "prefix" }
  ],
  "temp_ban": {
    "enabled": true,
    "status_codes": [401, 403, 404, 429],
    "max": 20,
    "window": "1m",
    "ban_duration": "15m"
  },
  "admin": {
    "enabled": true,
    "listen": ":9000",
    "credentials_file": "/data/admin_credentials.json"
  },
  "stats": {
    "disabled": false,
    "window_minutes": 60,
    "recent_requests": 5000,
    "file": "/data/stats.json",
    "save_interval": "1m"
  },
  "upstream": "10.0.0.10:8080",
  "routes": [
    { "host": "api.example.com", "upstream": "10.0.0.5:3000" },
    { "host": "*.internal.example.com", "upstream": "10.0.0.6:9000" }
  ]
}