Проект разделен на два репозитория

2026-08-14 15:42:45 +03:00
parent e06a77ee1d
commit bbef7a30c9
521 changed files with 2597 additions and 2302 deletions
@@ -0,0 +1,2 @@
+# Fail-closed active file. Replace atomically from the reviewed .template file.
+deny all;
@@ -0,0 +1,5 @@
+# Copy to bitrix-webhook-allowlist.conf only after ownership verification.
+# One reviewed directive per confirmed Bitrix24 source CIDR:
+# allow 192.0.2.10/32;
+# allow 2001:db8::10/128;
+deny all;
@@ -0,0 +1,3 @@
+# Fail-closed active file. Replace atomically from the reviewed .template file.
+allow 192.168.0.1;
+deny all;
@@ -0,0 +1,4 @@
+# VM1 and approved ops private source CIDRs only:
+# allow 10.20.0.10/32;
+# allow 10.20.1.0/28;
+deny all;
@@ -0,0 +1,14 @@
+proxy_http_version 1.1;
+proxy_set_header Connection "";
+proxy_set_header Host $host;
+proxy_set_header X-Real-IP $remote_addr;
+proxy_set_header X-Forwarded-For $remote_addr;
+proxy_set_header X-Forwarded-Proto https;
+proxy_set_header X-Forwarded-Host $host;
+proxy_set_header X-Forwarded-Port $server_port;
+proxy_set_header X-Request-ID $request_id;
+proxy_connect_timeout 3s;
+proxy_send_timeout 15s;
+proxy_request_buffering on;
+proxy_buffering off;
+proxy_intercept_errors off;
@@ -0,0 +1,5 @@
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_session_cache shared:TLS:10m;
+ssl_session_timeout 10m;
+ssl_session_tickets off;
+ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;