更新 Openresty 版本到 1.21.4.3-3-1-focal (#1539)

* feat: 更新 Openresty 版本到 1.21.4.3-3-1-focal

* feat: 更新配置文件

* feat: 网站监控增加日志保存天数

apps/openresty/1.21.4.3-3-1-focal/1pwaf/data/conf/monitor.json

@@ -0,0 +1,28 @@
+{
+  "state": "on",
+  "exclude": {
+    "extensions": [
+      "png",
+      "gif",
+      "jpg",
+      "css",
+      "js",
+      "svg",
+      "jpeg",
+      "woff",
+      "woff2",
+      "bmp",
+      "swf",
+      "icon",
+      "ttf",
+      "eot"
+    ],
+    "status": [],
+    "uri": [
+      "/favicon.ico"
+    ]
+  },
+  "log": {
+    "maxDay": 180
+  }
+}

apps/openresty/1.21.4.3-3-1-focal/1pwaf/data/conf/waf.conf

@@ -1,9 +1,9 @@
 lua_shared_dict waf_req_count 10m;
-lua_shared_dict waf 30m;
+lua_shared_dict waf 50m;
 lua_shared_dict waf_block_ip 10m;
-lua_shared_dict waf_ip_arr 10m;
+lua_shared_dict waf_ip_arr 20m;
 lua_shared_dict waf_limit 10m;
-lua_shared_dict waf_sql 50m;
+lua_shared_dict waf_sql 200m;
 lua_shared_dict waf_locks 100k;
 
 lua_code_cache on;

apps/openresty/1.21.4.3-3-1-focal/1pwaf/data/default/monitor.json

@@ -0,0 +1,28 @@
+{
+  "state": "on",
+  "exclude": {
+    "extensions": [
+      "png",
+      "gif",
+      "jpg",
+      "css",
+      "js",
+      "svg",
+      "jpeg",
+      "woff",
+      "woff2",
+      "bmp",
+      "swf",
+      "icon",
+      "ttf",
+      "eot"
+    ],
+    "status": [],
+    "uri": [
+      "/favicon.ico"
+    ]
+  },
+  "log": {
+    "maxDay": 180
+  }
+}

apps/openresty/1.21.4.3-3-1-focal/1pwaf/data/rules/cdn.json

@@ -42,6 +42,7 @@
     {
       "rule": "proxy-client-ip"
     }
-  ]
-}
-
+  ],
+  "type": "headers",
+  "header": "x-real-ip"
+}

apps/openresty/1.21.4.3-3-1-focal/1pwaf/data/rules/defaultUrlBlack.json

@@ -24,6 +24,18 @@
       "name": "dirFilter4",
       "type": "dirFilter"
     },
+    {
+      "state": "on",
+      "name": "dirFilter5",
+      "rule": "(?:etc\\/\\W*passwd)",
+      "type": "dirFilter"
+    },
+    {
+      "state": "on",
+      "name": "dirFilter6",
+      "rule": "(?:bin\\/\\W*sh)",
+      "type": "dirFilter"
+    },
     {
       "state": "on",
       "rule": "/(hack|shell|spy|phpspy)\\.php$",

apps/openresty/1.21.4.3-3-1-focal/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   openresty:
-    image: 1panel/openresty:1.21.4.3-2-2-focal
+    image: 1panel/openresty:1.21.4.3-3-1-focal
     container_name: ${CONTAINER_NAME}
     restart: always
     network_mode: host