476 lines
23 KiB
HTML
476 lines
23 KiB
HTML
{% extends "base.html" %}
|
|
|
|
{% set active_page = "index" %}
|
|
|
|
{% block title %}HAProxy • Configuration{% endblock %}
|
|
|
|
{% block breadcrumb %}
|
|
<nav aria-label="breadcrumb" class="mb-3">
|
|
<ol class="breadcrumb mb-0">
|
|
<li class="breadcrumb-item"><a href="{{ url_for('main.index') }}"><i class="bi bi-house"></i></a></li>
|
|
<li class="breadcrumb-item active" aria-current="page">Add Configuration</li>
|
|
</ol>
|
|
</nav>
|
|
{% endblock %}
|
|
|
|
{% block content %}
|
|
|
|
<div class="row mb-4">
|
|
<div class="col-md-3">
|
|
<div class="card text-center shadow-sm">
|
|
<div class="card-body">
|
|
<h5 class="card-title text-primary">{{ frontend_count|default(0) }}</h5>
|
|
<p class="card-text"><i class="bi bi-diagram-2"></i> Frontends</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-3">
|
|
<div class="card text-center shadow-sm">
|
|
<div class="card-body">
|
|
<h5 class="card-title text-success">{{ backend_count|default(0) }}</h5>
|
|
<p class="card-text"><i class="bi bi-hdd-rack"></i> Backends</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-3">
|
|
<div class="card text-center shadow-sm">
|
|
<div class="card-body">
|
|
<h5 class="card-title text-warning">{{ acl_count|default(0) }}</h5>
|
|
<p class="card-text"><i class="bi bi-shield"></i> ACLs</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-3">
|
|
<div class="card text-center shadow-sm">
|
|
<div class="card-body">
|
|
<h5 class="card-title text-info">L7: {{ layer7_count|default(0) }} / L4: {{ layer4_count|default(0) }}</h5>
|
|
<p class="card-text"><i class="bi bi-layers"></i> Layers</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{% if message %}
|
|
<div class="alert alert-{{ message_type|default('info') }} alert-dismissible fade show" role="alert">
|
|
<i class="bi bi-{% if message_type == 'success' %}check-circle{% elif message_type == 'danger' %}exclamation-circle{% elif message_type == 'warning' %}exclamation-triangle{% else %}info-circle{% endif %} me-2"></i>
|
|
{{ message }}
|
|
<button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
|
|
</div>
|
|
{% endif %}
|
|
|
|
<form method="post" class="needs-validation">
|
|
<div class="card shadow-sm mb-4">
|
|
<div class="card-header bg-primary text-white">
|
|
<h5 class="mb-0"><i class="bi bi-plus-circle me-2"></i>Add New Configuration</h5>
|
|
</div>
|
|
<div class="card-body">
|
|
|
|
<!-- FRONTEND SECTION -->
|
|
<h6 class="text-primary mb-3"><i class="bi bi-hdd-network me-2"></i>Frontend Configuration</h6>
|
|
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-4">
|
|
<label for="frontend_ip" class="form-label">Listener IP</label>
|
|
<input type="text" class="form-control" id="frontend_ip" name="frontend_ip"
|
|
placeholder="0.0.0.0" value="0.0.0.0" required>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label for="frontend_port" class="form-label">Listener Port</label>
|
|
<input type="number" class="form-control" id="frontend_port" name="frontend_port"
|
|
placeholder="443" value="443" min="1" max="65535" required>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<label for="frontend_hostname" class="form-label">Frontend Hostname</label>
|
|
<input type="text" class="form-control" id="frontend_hostname" name="frontend_hostname"
|
|
placeholder="e.g. host.domain.com" required>
|
|
<small class="text-muted d-block mt-1">Frontend name will be generated automatically</small>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-6">
|
|
<label for="protocol" class="form-label">Protocol</label>
|
|
<select class="form-select" id="protocol" name="protocol" required>
|
|
<option value="http">HTTP</option>
|
|
<option value="tcp">TCP</option>
|
|
</select>
|
|
</div>
|
|
<div class="col-md-6">
|
|
<label for="lb_method" class="form-label">Load Balancing Method</label>
|
|
<select class="form-select" id="lb_method" name="lb_method" required>
|
|
<option value="no-lb">No Load Balancing (single host)</option>
|
|
<option value="roundrobin">Round Robin</option>
|
|
<option value="leastconn">Least Connections</option>
|
|
<option value="source">Source IP Hash</option>
|
|
<option value="uri">URI Hash</option>
|
|
<option value="static-rr">Static Round Robin (WRR)</option>
|
|
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- SSL Section -->
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-12">
|
|
<div class="form-check form-switch">
|
|
<input class="form-check-input" type="checkbox" id="ssl_checkbox" name="ssl_checkbox">
|
|
<label class="form-check-label" for="ssl_checkbox">
|
|
<i class="bi bi-lock me-1"></i>Use SSL (HTTPS)
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="row g-3 mb-3 d-none" id="ssl_fields">
|
|
<div class="col-md-12">
|
|
<label for="ssl_cert_path" class="form-label">SSL Certificate Path</label>
|
|
<input type="text" class="form-control" id="ssl_cert_path" name="ssl_cert_path"
|
|
value="/app/ssl/haproxy-configurator.pem">
|
|
<small class="text-muted">Full path to .pem file</small>
|
|
</div>
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="ssl_redirect_checkbox"
|
|
name="ssl_redirect_checkbox">
|
|
<label class="form-check-label" for="ssl_redirect_checkbox">
|
|
Redirect HTTP to HTTPS
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- HTTP to HTTPS Redirect -->
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="backend_ssl_redirect"
|
|
name="backend_ssl_redirect">
|
|
<label class="form-check-label" for="backend_ssl_redirect">
|
|
<i class="bi bi-arrow-repeat me-1"></i>Add HTTP Redirect to HTTPS
|
|
</label>
|
|
<small class="text-muted d-block">Creates additional frontend to redirect HTTP traffic to HTTPS</small>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="row g-3 mb-3 d-none" id="backend_ssl_fields">
|
|
<div class="col-md-6">
|
|
<label for="ssl_redirect_backend_name" class="form-label">Redirect Backend Name</label>
|
|
<input type="text" class="form-control" id="ssl_redirect_backend_name"
|
|
name="ssl_redirect_backend_name" placeholder="e.g. redirect">
|
|
<small class="text-muted">Name for the redirect backend</small>
|
|
</div>
|
|
<div class="col-md-6">
|
|
<label for="ssl_redirect_port" class="form-label">HTTP Redirect Port</label>
|
|
<input type="number" class="form-control" id="ssl_redirect_port"
|
|
name="ssl_redirect_port" value="80" min="1" max="65535">
|
|
<small class="text-muted">Default: 80 (leave empty for standard)</small>
|
|
</div>
|
|
</div>
|
|
|
|
<hr class="my-4">
|
|
|
|
<!-- BACKEND SECTION -->
|
|
<h6 class="text-primary mb-3"><i class="bi bi-hdd-rack me-2"></i>Backend Configuration</h6>
|
|
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-12">
|
|
<label for="backend_name" class="form-label">Backend Name</label>
|
|
<input type="text" class="form-control" id="backend_name" name="backend_name"
|
|
placeholder="e.g. be_web" required>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Backend servers -->
|
|
<div class="mb-3">
|
|
<label class="form-label">Backend Servers</label>
|
|
<div id="backend_servers_container">
|
|
<div class="row g-3 backend-server-row">
|
|
<div class="col-md-3">
|
|
<input type="text" class="form-control" name="backend_server_names[]"
|
|
placeholder="server1" value="server1" required>
|
|
</div>
|
|
<div class="col-md-4">
|
|
<input type="text" class="form-control" name="backend_server_ips[]"
|
|
placeholder="192.168.1.10" required>
|
|
</div>
|
|
<div class="col-md-2">
|
|
<input type="number" class="form-control" name="backend_server_ports[]"
|
|
placeholder="80" min="1" max="65535" required>
|
|
</div>
|
|
<div class="col-md-2">
|
|
<input type="number" class="form-control" name="backend_server_maxconns[]"
|
|
placeholder="100">
|
|
</div>
|
|
<div class="col-md-1">
|
|
<button type="button" class="btn btn-danger btn-sm w-100 remove-server" style="visibility: hidden;">
|
|
<i class="bi bi-trash"></i>
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<button type="button" class="btn btn-secondary btn-sm mt-2" id="add_backend_btn">
|
|
<i class="bi bi-plus-lg me-1"></i>Add Server
|
|
</button>
|
|
</div>
|
|
|
|
<!-- Health Check -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="health_check" name="health_check">
|
|
<label class="form-check-label" for="health_check">
|
|
<i class="bi bi-heart-pulse me-1"></i>Enable Health Check
|
|
</label>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-12 d-none" id="health_check_fields">
|
|
<label for="health_check_link" class="form-label">Health Check Path</label>
|
|
<input type="text" class="form-control" id="health_check_link" name="health_check_link"
|
|
value="/" placeholder="/">
|
|
</div>
|
|
</div>
|
|
|
|
<div class="row g-3 mb-3" style="display: none;" id="tcp_health_check">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="health_check2" name="health_check2">
|
|
<label class="form-check-label" for="health_check2">
|
|
<i class="bi bi-heart-pulse me-1"></i>Enable TCP Health Check
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Sticky Session -->
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="sticky_session" name="sticky_session">
|
|
<label class="form-check-label" for="sticky_session">
|
|
<i class="bi bi-pin-angle me-1"></i>Sticky Session
|
|
</label>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-12 d-none" id="sticky_fields">
|
|
<select class="form-select" id="sticky_session_type" name="sticky_session_type">
|
|
<option value="cookie">Cookie-based</option>
|
|
<option value="source">Source IP-based</option>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<hr class="my-4">
|
|
|
|
<!-- HEADERS & SECURITY SECTION -->
|
|
<h6 class="text-primary mb-3"><i class="bi bi-shield-lock me-2"></i>Headers & Security</h6>
|
|
|
|
<!-- Custom Headers -->
|
|
<div class="row g-3 mb-3">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="add_header" name="add_header">
|
|
<label class="form-check-label" for="add_header">
|
|
<i class="bi bi-tag me-1"></i>Add Custom Header
|
|
</label>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-6 d-none" id="header_fields">
|
|
<input type="text" class="form-control" id="header_name" name="header_name"
|
|
placeholder="e.g. X-Custom-Header">
|
|
</div>
|
|
<div class="col-md-6 d-none" id="header_fields">
|
|
<input type="text" class="form-control" id="header_value" name="header_value"
|
|
placeholder="e.g. custom-value">
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Server Header Removal -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="del_server_header"
|
|
name="del_server_header">
|
|
<label class="form-check-label" for="del_server_header">
|
|
<i class="bi bi-shield-lock me-1"></i>Hide Server Header
|
|
</label>
|
|
<small class="text-muted d-block">Adds: <code>http-response del-header Server</code></small>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Forward For -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="forward_for_check"
|
|
name="forward_for_check" checked>
|
|
<label class="form-check-label" for="forward_for_check">
|
|
<i class="bi bi-arrow-right me-1"></i>Forward For (X-Forwarded-For)
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<hr class="my-4">
|
|
|
|
<!-- PROTECTION SECTION -->
|
|
<h6 class="text-primary mb-3"><i class="bi bi-bug me-2"></i>Protection</h6>
|
|
|
|
<!-- DOS Protection -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="add_dos" name="add_dos">
|
|
<label class="form-check-label" for="add_dos">
|
|
<i class="bi bi-exclamation-triangle me-1"></i>DOS/DDoS Protection
|
|
</label>
|
|
</div>
|
|
</div>
|
|
<div class="col-md-6 d-none" id="dos_fields">
|
|
<label for="ban_duration" class="form-label">Ban Duration</label>
|
|
<input type="text" class="form-control" id="ban_duration" name="ban_duration"
|
|
value="30m" placeholder="30m">
|
|
<small class="text-muted">e.g. 30m, 1h, 24h</small>
|
|
</div>
|
|
<div class="col-md-6 d-none" id="dos_fields">
|
|
<label for="limit_requests" class="form-label">Request Limit (per min)</label>
|
|
<input type="number" class="form-control" id="limit_requests" name="limit_requests"
|
|
value="100" min="1">
|
|
</div>
|
|
</div>
|
|
|
|
<!-- SQL Injection -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="sql_injection_check"
|
|
name="sql_injection_check">
|
|
<label class="form-check-label" for="sql_injection_check">
|
|
<i class="bi bi-database-exclamation me-1"></i>SQL Injection Protection
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- XSS -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="xss_check" name="xss_check">
|
|
<label class="form-check-label" for="xss_check">
|
|
<i class="bi bi-code-slash me-1"></i>XSS Protection
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Remote Uploads -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="remote_uploads_check"
|
|
name="remote_uploads_check">
|
|
<label class="form-check-label" for="remote_uploads_check">
|
|
<i class="bi bi-cloud-upload me-1"></i>Block Remote Uploads
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Webshells -->
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="webshells_check"
|
|
name="webshells_check">
|
|
<label class="form-check-label" for="webshells_check">
|
|
<i class="bi bi-shield-exclamation me-1"></i>Block Webshells
|
|
</label>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<hr class="my-4">
|
|
|
|
<!-- CUSTOM ACL SECTION -->
|
|
<h6 class="text-primary mb-3"><i class="bi bi-shuffle me-2"></i>Custom ACL Rules (Advanced)</h6>
|
|
|
|
<div class="row g-3 mb-3 http-only">
|
|
<div class="col-md-12">
|
|
<div class="form-check">
|
|
<input class="form-check-input" type="checkbox" id="add_custom_acl" name="add_custom_acl">
|
|
<label class="form-check-label" for="add_custom_acl">
|
|
<i class="bi bi-sliders me-1"></i>Add Custom ACL Rule
|
|
</label>
|
|
<small class="text-muted d-block">Create additional routing or blocking rules</small>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Custom ACL Fields -->
|
|
<div class="row g-3 mb-3 http-only d-none" id="custom_acl_fields">
|
|
<div class="col-md-3">
|
|
<label for="custom_acl_name" class="form-label">ACL Name</label>
|
|
<input type="text" class="form-control" id="custom_acl_name" name="custom_acl_name"
|
|
placeholder="e.g. is_admin_path">
|
|
</div>
|
|
|
|
<div class="col-md-3">
|
|
<label for="custom_acl_type" class="form-label">Rule Type</label>
|
|
<select class="form-select" id="custom_acl_type" name="custom_acl_type">
|
|
<option value="path_beg">Path Begins With</option>
|
|
<option value="path_end">Path Ends With</option>
|
|
<option value="path_sub">Path Contains</option>
|
|
<option value="hdr">Header Contains</option>
|
|
<option value="src">Source IP</option>
|
|
<option value="method">HTTP Method</option>
|
|
</select>
|
|
</div>
|
|
|
|
<div class="col-md-3">
|
|
<label for="custom_acl_value" class="form-label">Rule Value</label>
|
|
<input type="text" class="form-control" id="custom_acl_value" name="custom_acl_value"
|
|
placeholder="e.g. /admin, api, 192.168.1.0/24">
|
|
</div>
|
|
|
|
<div class="col-md-3">
|
|
<label for="custom_acl_action" class="form-label">Action</label>
|
|
<select class="form-select" id="custom_acl_action" name="custom_acl_action">
|
|
<option value="route">Route to Backend</option>
|
|
<option value="deny">Block (Deny)</option>
|
|
<option value="redirect">Redirect</option>
|
|
</select>
|
|
</div>
|
|
|
|
<div class="col-md-6 d-none" id="acl_backend_select">
|
|
<label for="custom_acl_backend" class="form-label">Target Backend</label>
|
|
<input type="text" class="form-control" id="custom_acl_backend" name="custom_acl_backend"
|
|
placeholder="e.g. be_admin">
|
|
</div>
|
|
|
|
<div class="col-md-6 d-none" id="acl_redirect_select">
|
|
<label for="custom_acl_redirect_url" class="form-label">Redirect URL</label>
|
|
<input type="text" class="form-control" id="custom_acl_redirect_url" name="custom_acl_redirect_url"
|
|
placeholder="e.g. https://example.com/new-path">
|
|
</div>
|
|
</div>
|
|
|
|
<hr class="my-4">
|
|
|
|
<!-- SUBMIT BUTTON -->
|
|
<div class="d-grid gap-2">
|
|
<button type="submit" class="btn btn-primary btn-lg">
|
|
<i class="bi bi-check-circle me-2"></i>Save Configuration
|
|
</button>
|
|
</div>
|
|
|
|
</div>
|
|
</div>
|
|
</form>
|
|
|
|
<script src="{{ url_for('static', filename='js/index.js') }}"></script>
|
|
<script src="{{ url_for('static', filename='js/form.js') }}"></script>
|
|
|
|
{% endblock %}
|