denozord/EvoFirewall

Fork 0

Files

T

DenozordecandCursor ebadf70e2b

Build and Push EvoFirewall Docker Image / build-and-push (push) Failing after 25s

Details

Build and Push EvoFirewall Docker Image / create-release (push) Skipped

Details

feat: реализовать EvoFirewall V1 control plane

API, UI, Linux/MikroTik agents, IP lists, политики, stats, CI и интеграция с auth-portal/EvoBGP.

Co-authored-by: Cursor <[email protected]>

2026-07-20 19:50:54 +07:00

1.1 KiB

Raw Blame History

Интеграция auth-portal ↔ EvoFirewall

App id: fw.

Flow

Browser → EvoFirewall UI (нет token)
       → redirect AUTH_PORTAL_URL/?return_to=…/auth/callback
       → login
       → redirect return_to#access_token=…
       → /auth/callback сохраняет token
       → API Authorization: Bearer <JWT>

Permissions

Permission	UI
`fw:dashboard:read`	`/`
`fw:agents:read` / `write`	`/agents`
`fw:lists:read` / `write`	`/lists`
`fw:policies:read` / `write`	`/rules`, overrides
`fw:stats:read`	`/stats`
`fw:settings:admin`	`/settings`, install-context

Env

AUTH_REQUIRED=true
AUTH_JWT_SECRET=<тот же JWT_SECRET портала>
AUTH_ISSUER=https://auth.shnt.top
AUTH_PORTAL_URL=https://auth.shnt.top
PUBLIC_BASE_URL=https://fw.example.com
EVOFW_ENROLL_SEED=<hex/seed>

# apps/web/.env.local
VITE_AUTH_ENABLED=true
VITE_AUTH_PORTAL_URL=https://auth.shnt.top

В portal Admin → Apps выдайте app fw и нужные fw:*. URL в App Switcher: origin EvoFirewall.

1.1 KiB Raw Blame History Unescape Escape

Интеграция auth-portal ↔ EvoFirewall

Flow

Permissions

Env

1.1 KiB

Raw Blame History