kasperj/chittick_projects
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Claude 1

Browse Source
This commit is contained in:
Jake Kasper
2025-12-09 09:33:48 -06:00
parent 228174e541
commit 4f1e8d3add
55 changed files with 4345 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
sophos-xgs-ansible/roles/sophos_waf/templates/waf_backend.json.j2 Normal file
View File

@@ -0,0 +1,15 @@
<Request>
<Login>
<Username>{{ sophos_api_username }}</Username>
<Password>{{ sophos_api_password }}</Password>
</Login>
<Set operation="add">
<WebServer>
<Name>{{ item.name }}</Name>
<Host>{{ item.host }}</Host>
<Port>{{ item.port }}</Port>
<Protocol>{{ item.protocol | upper }}</Protocol>
<HealthCheck>{{ 'Enable' if item.health_check | default(true) else 'Disable' }}</HealthCheck>
</WebServer>
</Set>
</Request>

24
sophos-xgs-ansible/roles/sophos_waf/templates/waf_exception.json.j2 Normal file
View File

@@ -0,0 +1,24 @@
<Request>
<Login>
<Username>{{ sophos_api_username }}</Username>
<Password>{{ sophos_api_password }}</Password>
</Login>
<Set operation="add">
<WebException>
<Name>{{ item.name }}</Name>
<VirtualHost>{{ item.virtual_host }}</VirtualHost>
<Path>{{ item.path }}</Path>
<SkipRules>
{% for rule in item.skip_rules %}
<Rule>{{ rule }}</Rule>
{% endfor %}
</SkipRules>
<SourceNetworks>
{% for network in item.source_networks %}
<Network>{{ network }}</Network>
{% endfor %}
</SourceNetworks>
<Comment>{{ item.comment | default('') }}</Comment>
</WebException>
</Set>
</Request>

31
sophos-xgs-ansible/roles/sophos_waf/templates/waf_policy.json.j2 Normal file
View File

@@ -0,0 +1,31 @@
<Request>
<Login>
<Username>{{ sophos_api_username }}</Username>
<Password>{{ sophos_api_password }}</Password>
</Login>
<Set operation="add">
<WebPolicy>
<Name>{{ item.name }}</Name>
<Domain>{{ item.domain }}</Domain>
<ListeningIP>{{ item.listening_ip }}</ListeningIP>
<ListeningPort>{{ item.listening_port }}</ListeningPort>
<Protocol>{{ item.protocol | upper }}</Protocol>
{% if item.ssl_certificate is defined %}
<SSLCertificate>{{ item.ssl_certificate }}</SSLCertificate>
{% endif %}
<BackendServers>
{% for backend in item.backend_servers %}
<Server>{{ backend }}</Server>
{% endfor %}
</BackendServers>
<LoadBalancing>{{ item.load_balancing | default('round-robin') }}</LoadBalancing>
<ProtectionPolicy>{{ item.protection_policy }}</ProtectionPolicy>
<SessionTimeout>{{ item.session_timeout | default(1800) }}</SessionTimeout>
<HSTS>{{ 'Enable' if item.enable_hsts | default(false) else 'Disable' }}</HSTS>
<Compression>{{ 'Enable' if item.enable_compression | default(false) else 'Disable' }}</Compression>
{% if item.websocket_support is defined %}
<WebSocketSupport>{{ 'Enable' if item.websocket_support else 'Disable' }}</WebSocketSupport>
{% endif %}
</WebPolicy>
</Set>
</Request>