Add custom error pages and Nginx configuration for proxy module

- Introduced custom HTML error pages for various HTTP status codes (400, 401, 403, 404, 408, 429, 500, 502, 503, 504) in the proxy module.
- Created a .gitignore file to exclude non-HTML files in the error resources directory.
- Updated Nginx configuration to serve custom error pages for upstream errors.
- Added new Nginx configuration templates for handling HTTP and stream protocols.
- Implemented Wireguard configuration templates and associated variables for secure connections.
- Established Kubernetes resources for Stunnel and Wireguard, including deployment, service accounts, and config maps.
- Defined variables for the Stunnel and Wireguard modules to facilitate configuration.
- Created a new Wol Proxy module with Kubernetes resources for deployment and service management.
This commit is contained in:
2025-10-02 00:19:01 +02:00
parent 4d00986273
commit e6a3f3affd
62 changed files with 1517 additions and 99 deletions
+14 -2
View File
@@ -60,7 +60,7 @@ ufw_outgoing_traffic:
- 16443 # Kube API Server
- 4443
- 9443
- 995 # POP3S
- 993 # IMAPS
ufw_default_forward_policy: "ACCEPT"
@@ -96,7 +96,15 @@ fail2ban_jails:
filter: "postfix-k8s"
logpath: "/var/log/postfix/current"
maxretry: 3
findtime: 18000
findtime: 600
bantime: -1
dovecot:
enabled: true
port: "imap,imaps,pop3,pop3s"
filter: "dovecot-k8s"
logpath: "/var/log/dovecot/info.log"
maxretry: 3
findtime: 600
bantime: -1
fail2ban_filters:
@@ -104,6 +112,10 @@ fail2ban_filters:
Definition:
failregex: "^.*?postfix/smtps/smtpd\\[\\d+\\]:.*\\[<HOST>\\]: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed.*$"
ignoreregex: ""
dovecot-k8s:
Definition:
failregex: "(?: pop3-login|imap-login): .*(?:Authentication failure|Aborted login \\(auth failed|Aborted login \\(tried to use disabled|Disconnected \\(auth failed|Aborted login \\(\\d+ authentication attempts).*rip=`<HOST>"
ignoreregex: ""
# aide
install_aide: true