Skip to content

Ilvina Akhmetzianova - Lab 11 #1640

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
IviUnicorn wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Ilvina Akhmetzianova - Lab 11 #1640

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
99472c5
docs(lab1): add PR template
IviUnicorn Oct 17, 2025
a8297a0
feat(lab11): hardened nginx + WAF sidecar
IviUnicorn Jul 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions .github/pull_request_template.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
## Goal
<!-- Clearly describe the purpose and objective of this pull request. What problem does it solve or what feature does it add? -->

## Changes
<!-- List the key changes made in this PR. Bullet points are preferred. -->

## Testing
<!-- Describe how you tested these changes. Include any relevant test scenarios, steps to reproduce testing, or test results. -->

## Artifacts & Screenshots
<!-- Add any relevant screenshots, videos, or other visual artifacts that demonstrate the changes. -->

## Checklist

- [ ] PR has a clear, descriptive title
- [ ] Documentation has been updated if applicable
- [ ] No secrets or large temporary files are included in the changes

---

<!-- Example commit message for reference: -->
<!-- docs: add PR template -->
Binary file added labs/assets/homepage.jpg
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
19 changes: 19 additions & 0 deletions labs/lab11/docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
services:
juice:
image: bkimminich/juice-shop:v20.0.0
restart: unless-stopped
expose:
- "3000"

nginx:
image: nginx:stable-alpine
restart: unless-stopped
depends_on:
- juice
ports:
- "80:80"
- "443:443"
volumes:
- ./reverse-proxy/nginx.conf:/etc/nginx/nginx.conf:ro
- ./reverse-proxy/certs:/etc/nginx/certs:ro
- ./logs:/var/log/nginx:rw
74 changes: 74 additions & 0 deletions labs/lab11/logs/access.log
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,74 @@
172.18.0.1 - - [17/Jul/2026:19:05:21 +0000] "GET /rest/admin/application-version HTTP/2.0" 200 20 "-" "curl/8.19.0" rt=0.008 uct=0.001 urt=0.008
172.18.0.1 - - [17/Jul/2026:19:05:34 +0000] "HEAD / HTTP/1.1" 308 0 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:35 +0000] "" 400 0 "-" "-" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:35 +0000] "HEAD / HTTP/2.0" 200 0 "-" "curl/8.19.0" rt=0.002 uct=0.000 urt=0.002
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 500 3014 "-" "curl/8.19.0" rt=0.004 uct=0.000 urt=0.004
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 500 3014 "-" "curl/8.19.0" rt=0.012 uct=0.000 urt=0.012
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 500 3014 "-" "curl/8.19.0" rt=0.018 uct=0.000 urt=0.018
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 500 3014 "-" "curl/8.19.0" rt=0.026 uct=0.000 urt=0.026
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 429 162 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 500 3014 "-" "curl/8.19.0" rt=0.030 uct=0.000 urt=0.030
172.18.0.1 - - [17/Jul/2026:19:05:41 +0000] "GET /rest/user/login HTTP/2.0" 500 3014 "-" "curl/8.19.0" rt=0.032 uct=0.000 urt=0.032
172.18.0.1 - - [17/Jul/2026:19:05:43 +0000] "" 400 0 "-" "-" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:05:52 +0000] "GET / HTTP/1.0" 408 0 "-" "-" rt=10.008 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:06:10 +0000] "" 400 0 "-" "-" rt=0.000 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:06:22 +0000] "GET / HTTP/1.1" 408 0 "-" "-" rt=10.010 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:06:47 +0000] "GET /" 408 0 "-" "-" rt=10.010 uct=- urt=-
172.18.0.1 - - [17/Jul/2026:19:08:41 +0000] "GET /rest/products/search?q='%20OR%201=1-- HTTP/2.0" 500 942 "-" "curl/8.19.0" rt=0.006 uct=0.000 urt=0.006
172.18.0.1 - - [17/Jul/2026:19:12:36 +0000] "GET /rest/products/search?q='%20OR%201=1-- HTTP/2.0" 500 942 "-" "curl/8.19.0" rt=0.004 uct=0.001 urt=0.005
172.18.0.4 - - [17/Jul/2026:19:16:44 +0000] "GET / HTTP/1.1" 308 164 "-" "curl/8.19.0" rt=0.000 uct=- urt=-
172.18.0.4 - - [17/Jul/2026:19:18:35 +0000] "GET / HTTP/1.1" 200 9903 "-" "curl/8.19.0" rt=0.002 uct=0.000 urt=0.002
172.18.0.1 - - [17/Jul/2026:19:18:46 +0000] "GET /rest/products/search?q='%20OR%201=1-- HTTP/2.0" 500 942 "-" "curl/8.19.0" rt=0.004 uct=0.001 urt=0.004
Loading