fatchan
/
haproxy-panel-next
mirror of https://gitgud.io/fatchan/haproxy-panel-next.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Next.js+React web interface for controlling HAProxy clusters (groups of servers), in conjunction with with https://gitgud.io/fatchan/haproxy-protection.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
95 Commits
3 Branches
0 Tags
8.1 MiB
 
 
Tag: Branch: Tree: da886e3d72
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'da886e3d72'
${ noResults }
Go to file
Thomas Lynch da886e3d72
Make ca verity subject and altnames so any user can generate them safely 		1 year ago
components Add the matching menulinks to account page, and update the icon for CSR to the unfilled variant 1 year ago
controllers Make ca verity subject and altnames so any user can generate them safely 1 year ago
img update README 1 year ago
pages filter shown certs to only permission domains 1 year ago
public add new favicon 2 years ago
.dockerignore Allow ca cert and pinned fp/s to be separate, and ignore node_modules in dockerignore, vastly speeds up builds (duh) 1 year ago
.env.example Add influxdb stat exporting 1 year ago
.eslintrc.json eslint, fix some bigs 2 years ago
.gitignore CA cert signing request option, add ca.js. early version 1 year ago
Dockerfile CA cert signing request option, add ca.js. early version 1 year ago
LICENSE add AGPLv3 license 2 years ago
README.md change in server ID fetching 1 year ago
acme.js skip internal verification check in acme because it fails sometimes and doesnt bother trying to get a cert which would work normally 1 year ago
agent.js Allow ca cert and pinned fp/s to be separate, and ignore node_modules in dockerignore, vastly speeds up builds (duh) 1 year ago
api.js Add statistics page based on dataplane.getStats, link in sidebar, udpated README 1 year ago
ca.js Make ca verity subject and altnames so any user can generate them safely 1 year ago
db.js Initial commit 2 years ago
docker-compose.yml CA cert signing request option, add ca.js. early version 1 year ago
gulpfile.js fix a few bugs in cert issuance and comment out a check in cluster deletion until they are converted to have an ID 1 year ago
influxdb.js Add influxdb stat exporting 1 year ago
next.config.js implement global toggle 2 years ago
openapi-definition.js Make openapi definitio nstatic and sync inited and change how the instances in dataplaneAll works 1 year ago
package-lock.json Add influxdb stat exporting 1 year ago
package.json Add influxdb stat exporting 1 year ago
router.js split agent into separate file 1 year ago
server.js Make ca verity subject and altnames so any user can generate them safely 1 year ago
util.js add rewrite map for redirecting domains easily 1 year ago

README.md

BasedFlare Control Panel

Work in progress. Not recommended for production deployment. No instructions or help provided whatsoever.

Internally uses haproxy dataplaneapi. Intended for use with haproxy-protection.

Provides a control panel interface to conveniently manage clusters (groups of identically configured) HAProxy servers. Can be used with a single server cluster. Uses haproxy runtime apis to update maps, acls, etc.

Features:
  • Works with javascript disabled on the client (next.js server side rendering).
  • List/add/remove clusters (server groups).
  • List/add/remove domains for your account.
  • Control allowed hosts for a cluster.
  • Custom backend server IP and port per-domain.
  • HTTPS certificate management. Automatically generate for domain(s) and upload to cluster servers.
  • Supports local private CA. Can install root cert on all your proxies and can sign CSR's for proper origin ssl validation.
  • IP or subnet blacklist. Supports ipv4 and ipv6.
  • IP or subnet whitelist. Supports ipv4 and ipv6.
  • Redirects, rewrites url to a different domain+path.
  • Protection rules, choose bot protection mode "none" (whitelist), proof-of-work or proof-of-work+captcha. Can be domain-wide or a domain+path. Path overrides domain-wide.
  • Global override for protection mode, to enable for all domains in a cluster.
  • Maintenance mode, disables proxying for selected domains and serves an "under maintenance" page from haproxy.
  • Statistics page with server and backend-level breakdowns based on haproxy stats socket data. Ability to export statistics to influxdb.
Todo:
  • Better Multi-user support
    • allow domain/cluster editing (with user dupe check) for non-admins
    • problems w/ ip whitelist and blacklist
  • Some kind of payment system
  • More advanced rules and ability to allow/block/bot mode based on those rules.
  • Show statistics from clusters or servers within a cluster.
    • Intelligent auto toggling of proteciton modes based on these stats

Screenshots

screenshot

For generous people

Bitcoin (BTC): bc1q4elrlz5puak4m9xy3hfvmpempnpqpu95v8s9m6

Monero (XMR): 89J9DXPLUBr5HjNDNZTEo4WYMFTouSsGjUjBnUCCUxJGUirthnii4naZ8JafdnmhPe4NP1nkWsgcK82Uga7X515nNR1isuh

Oxen (OXEN): LBjExqjDKCFT6Tj198CfK8auAzBERJX1ogtcsjuKZ6AYWTFxwEADLgf2zZ8NHvWCa1UW7vrtY8DJmPYFpj3MEE69CryCvN6