customer-engineering/wallarm
3
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

feat: nginx with Wallarm module in systemd, wallarm-status endpoint

Browse source
This commit is contained in:
admin 2026-08-02 06:33:07 +00:00
parent 50ba28c2f9
commit 56468d3366
1 changed files with 25 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
internal/native/native.go
View file

@ -182,15 +182,18 @@ After=network.target
Type=simple Type=simple
WorkingDirectory=%s/%%i/wallarm WorkingDirectory=%s/%%i/wallarm
EnvironmentFile=-%s/%%i/wallarm/env.list EnvironmentFile=-%s/%%i/wallarm/env.list
ExecStartPre=%s/%%i/wallarm/nginx/sbin/nginx -c %s/%%i/wallarm/nginx/conf/nginx.conf -p %s/%%i/wallarm/nginx/ 2>/dev/null || true
ExecStartPre=/bin/sleep 2
ExecStart=%s/%%i/wallarm/usr/bin/python3.10 %s/%%i/wallarm/usr/bin/supervisord -c %s/%%i/wallarm/etc/supervisord.conf ExecStart=%s/%%i/wallarm/usr/bin/python3.10 %s/%%i/wallarm/usr/bin/supervisord -c %s/%%i/wallarm/etc/supervisord.conf
ExecStop=%s/%%i/wallarm/usr/bin/python3.10 %s/%%i/wallarm/usr/bin/supervisord -c %s/%%i/wallarm/etc/supervisord.conf shutdown ExecStop=%s/%%i/wallarm/usr/bin/python3.10 %s/%%i/wallarm/usr/bin/supervisord -c %s/%%i/wallarm/etc/supervisord.conf shutdown
ExecStopPost=%s/%%i/wallarm/nginx/sbin/nginx -s quit -p %s/%%i/wallarm/nginx/ 2>/dev/null || true
Restart=on-failure Restart=on-failure
RestartSec=5 RestartSec=5
User=root User=root
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target
`, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir) `, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir, BaseDir)
os.WriteFile(tmpl, []byte(content), 0644) os.WriteFile(tmpl, []byte(content), 0644)
exec.Command("systemctl", "daemon-reload").Run() exec.Command("systemctl", "daemon-reload").Run()
return nil return nil
@ -213,20 +216,39 @@ func startNginx(dir string, node state.Node, port string) {
confDir := filepath.Join(nginxDir, "conf") confDir := filepath.Join(nginxDir, "conf")
os.MkdirAll(confDir, 0755) os.MkdirAll(confDir, 0755)
confPath := filepath.Join(confDir, "nginx.conf") confPath := filepath.Join(confDir, "nginx.conf")
upstream := fmt.Sprintf("%s:%d", node.UpstreamIP, node.UpstreamPort)
if node.UpstreamIP == "" {
upstream = "127.0.0.1:80"
}
os.WriteFile(confPath, []byte(fmt.Sprintf(` os.WriteFile(confPath, []byte(fmt.Sprintf(`
load_module %s/modules/nginx_v1.26.3_s0ff5dffff/ngx_http_wallarm_module.so;
worker_processes auto; worker_processes auto;
pid %s/nginx.pid; pid %s/nginx.pid;
error_log %s/error.log; error_log %s/error.log;
events { worker_connections 10240; } events { worker_connections 10240; }
http { http {
access_log %s/access.log; access_log %s/access.log;
wallarm_mode monitoring;
server { server {
listen %s; listen %s;
server_name _; server_name _;
location /health { return 200; }
location /wallarm-status {
wallarm_status on;
allow 127.0.0.0/8;
deny all;
}
location / {
proxy_pass http://%s;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
} }
} }
`, nginxDir, nginxDir, nginxDir, port)), 0644) }
`, dir, nginxDir, nginxDir, nginxDir, port, upstream)), 0644)
bin := filepath.Join(nginxDir, "sbin", "nginx") bin := filepath.Join(nginxDir, "sbin", "nginx")
cmd := exec.Command(bin, "-c", confPath, "-p", nginxDir) cmd := exec.Command(bin, "-c", confPath, "-p", nginxDir)