mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-30 06:16:37 +08:00
ryan
7366832e12
OPM 无 api7/lua-resty-ipmatcher 账号导致镜像构建失败；改为 vendor api7 v0.6.1 并随 ManagedWAFLuaFiles 部署到 lua 目录。
43 lines
1.4 KiB
Go
43 lines
1.4 KiB
Go
package nginx
|
|
|
|
import (
|
|
_ "embed"
|
|
|
|
"github.com/Rain-kl/Wavelet/internal/apps/agent/protocol"
|
|
)
|
|
|
|
//go:embed waf_runtime.lua
|
|
var openRestyWAFRuntimeLua string
|
|
|
|
//go:embed waf_ip_groups.lua
|
|
var openRestyWAFIPGroupsLua string
|
|
|
|
// Vendored from https://github.com/api7/lua-resty-ipmatcher v0.6.1 (Apache-2.0).
|
|
// OPM has no api7/lua-resty-ipmatcher package; deploy with Agent Lua assets instead.
|
|
//
|
|
//go:embed resty/ipmatcher.lua
|
|
var openRestyIPMatcherLua string
|
|
|
|
const openRestyWAFCheckLua = `local source = debug.getinfo(1, "S").source or ""
|
|
if string.sub(source, 1, 1) == "@" then
|
|
local script_path = string.sub(source, 2)
|
|
local base_dir = string.match(script_path, "^(.*)/waf/[^/]+%.lua$")
|
|
if base_dir and base_dir ~= "" and not string.find(package.path, base_dir, 1, true) then
|
|
package.path = base_dir .. "/?.lua;" .. base_dir .. "/?/init.lua;" .. package.path
|
|
end
|
|
end
|
|
|
|
return require("waf.runtime").check()
|
|
`
|
|
|
|
// ManagedWAFLuaFiles returns the embedded Lua source files that must be deployed to the WAF runtime directory.
|
|
func ManagedWAFLuaFiles() []protocol.SupportFile {
|
|
return []protocol.SupportFile{
|
|
{Path: "waf/runtime.lua", Content: openRestyWAFRuntimeLua},
|
|
{Path: "waf/ip_groups.lua", Content: openRestyWAFIPGroupsLua},
|
|
{Path: "waf/check.lua", Content: openRestyWAFCheckLua},
|
|
// resty.ipmatcher under lua_package_path <luaDir>/?.lua
|
|
{Path: "resty/ipmatcher.lua", Content: openRestyIPMatcherLua},
|
|
}
|
|
}
|