61 lines
2.1 KiB
Go
61 lines
2.1 KiB
Go
|
package api
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/havline/havline/internal/proxy"
|
||
|
|
)
|
||
|
|
|
||
|
|
type securityRequest struct {
|
||
|
|
IPBlacklist []string `json:"ip_blacklist,omitempty"`
|
||
|
|
IPWhitelist []string `json:"ip_whitelist,omitempty"`
|
||
|
|
IPWhitelistMode *bool `json:"ip_whitelist_mode,omitempty"`
|
||
|
|
IPBlacklistText *string `json:"ip_blacklist_text,omitempty"`
|
||
|
|
IPWhitelistText *string `json:"ip_whitelist_text,omitempty"`
|
||
|
|
ChinaOnly *bool `json:"china_only,omitempty"`
|
||
|
|
BasicAuth *basicAuthRequest `json:"basic_auth,omitempty"`
|
||
|
|
RateLimit *proxy.RateLimitConfig `json:"rate_limit,omitempty"`
|
||
|
|
ConnLimit *proxy.ConnLimitConfig `json:"conn_limit,omitempty"`
|
||
|
|
ProxySSLVerifyOff *bool `json:"proxy_ssl_verify_off,omitempty"`
|
||
|
|
ProxyHostUpstream *bool `json:"proxy_host_upstream,omitempty"`
|
||
|
|
TLSMin13Only *bool `json:"tls_min_13_only,omitempty"`
|
||
|
|
SecurityHeaders *bool `json:"security_headers,omitempty"`
|
||
|
|
}
|
||
|
|
|
||
|
|
type basicAuthRequest struct {
|
||
|
|
Enabled *bool `json:"enabled,omitempty"`
|
||
|
|
Username *string `json:"username,omitempty"`
|
||
|
|
Password *string `json:"password,omitempty"`
|
||
|
|
}
|
||
|
|
|
||
|
|
func (req *proxyRequest) securityInput() proxy.SecurityInput {
|
||
|
|
if req.Security == nil {
|
||
|
|
return proxy.SecurityInput{}
|
||
|
|
}
|
||
|
|
s := req.Security
|
||
|
|
in := proxy.SecurityInput{
|
||
|
|
IPBlacklist: s.IPBlacklist,
|
||
|
|
IPWhitelist: s.IPWhitelist,
|
||
|
|
IPWhitelistMode: s.IPWhitelistMode,
|
||
|
|
ChinaOnly: s.ChinaOnly,
|
||
|
|
RateLimit: s.RateLimit,
|
||
|
|
ConnLimit: s.ConnLimit,
|
||
|
|
ProxySSLVerifyOff: s.ProxySSLVerifyOff,
|
||
|
|
ProxyHostUpstream: s.ProxyHostUpstream,
|
||
|
|
TLSMin13Only: s.TLSMin13Only,
|
||
|
|
SecurityHeaders: s.SecurityHeaders,
|
||
|
|
}
|
||
|
|
if s.IPBlacklistText != nil {
|
||
|
|
in.IPBlacklist = proxy.ParseIPListText(*s.IPBlacklistText)
|
||
|
|
}
|
||
|
|
if s.IPWhitelistText != nil {
|
||
|
|
in.IPWhitelist = proxy.ParseIPListText(*s.IPWhitelistText)
|
||
|
|
}
|
||
|
|
if s.BasicAuth != nil {
|
||
|
|
in.BasicAuth = &proxy.BasicAuthInput{
|
||
|
|
Enabled: s.BasicAuth.Enabled,
|
||
|
|
Username: s.BasicAuth.Username,
|
||
|
|
Password: s.BasicAuth.Password,
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return in
|
||
|
|
}
|