Djeex/docudjeex
1
1
Fork 0
Code Issues Pull Requests Actions Projects Wiki Activity

Fix config and variable mismatches found in the audit

Browse Source
This commit is contained in:
Djeex
2026-09-07 12:59:34 +02:00
parent 1860f90785
commit 3c85fec634
24 changed files with 105 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/3.serveex/3.security/2.cloudflare.md
+13 -2
View File
@@ -58,7 +58,7 @@ Once created, your token will only be shown once. Save it securely, as it cannot
You must register for _Cloudflare Teams_ to access the _Zero Trust_ dashboard that manages tunnels and access policies. This is a premium service, but there’s a free plan for up to 50 users, perfect for a home lab. Keep in mind that a valid credit card is required to register, but the free plan incurs no charges.
Register [via this link](https://dash.teams.cloudflare.com/).
Register [via this link](https://one.dash.cloudflare.com/).
## SWAG Configuration
::note
@@ -124,6 +124,17 @@ Save with :kbd{value="Ctrl+O"}, then :kbd{value="Enter"}, and exit with :kbd{val
### Deploy the SWAG stack
::warning
This replaces your whole SWAG service definition. If you already added a `networks:` section or `EXTRA_DOMAINS` for other apps (Dockge, TinyAuth, etc.), merge those into the block below instead of pasting over them, or you'll lose that configuration.
::
Make sure the fail2ban database file already exists, or Docker will create a directory in its place instead of mounting the file, silently breaking ban persistence:
```bash [Terminal]
sudo touch /srv/docker/swag/config/fail2ban/fail2ban.sqlite3
```
In Dockge, edit your SWAG stack with this:
```yaml [compose.yaml]
@@ -190,7 +201,7 @@ TUNNEL_PW=
| Variable | Value | Example |
|----------------|-------------------------------------------------------------|--------------------------------|
| `PUID` | User ID (`id username`) | `1000` |
| `GUID` | Group ID (`id username`) | `1000` |
| `PGID` | Group ID (`id username`) | `1000` |
| `DOMAIN` | Your reserved domain | `mondomaine.fr` |
| `PLUGIN` | DNS provider (also configure `cloudflare.ini`) | `cloudflare` |
| `EMAIL` | Email for the certificate | `you@email.com` |