Changes
- Access lists can skip Basic Auth for allowed addresses. Skip Basic Auth for allowed addresses on a list lets clients that match an Allow IP or CIDR rule in without a username and password; everyone else still signs in. Off by default.
- WAF
allowrules for trusted addresses work. A custom rule withphase:1andallownow runs before the Core Rule Set. It used to run after it and had no effect. - TCP and UDP L4 hosts can share a port. A TCP and a UDP host on the same port used to end up in one server, and only one of them listened. They now get one listener each.
- Documented that the
hostnamein Coraza'swaf-rules.loglines is always empty, and thatwaf-audit.loghas the host of every event. - Dependency updates: the Caddy image's Go and Ubuntu base images, and the production and development dependency groups.
- Database migration
0066adds one column to access lists; it runs on start.
Donations
Ingressi is free. If it saves you time or money, please consider supporting it: GitHub Sponsors or Ko-fi.