- 4-container stack: ClickHouse, platform (Rocky 9), bot-detector, dashboard - Platform builds sentinel on Rocky (CGO+libpcap native), correlator static - mod-reqin-log compiled with apxs on Rocky (matching RPM build target) - ClickHouse init script patches credentials for test env (sed-based) - 8-phase test runner: schema, traffic gen, pipeline, dashboard API, bot-detector, sentinel - All 13 checks pass, 3 non-blocking warnings (empty dicts, log paths) SQL schema fixes discovered during integration: - 02_dictionaries: IPv6CIDR → String (not a valid ClickHouse type) - 03_anubis_tables: dict_anubis_ua missing has_ip/rule_id/category attrs - 03_anubis_tables: dict_anubis_country FLAT() → COMPLEX_KEY_HASHED() (String key) - 09_audit_table: CODEC before DEFAULT → DEFAULT before CODEC Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
29 lines
925 B
Plaintext
29 lines
925 B
Plaintext
# Integration test Apache config — HTTPS + mod-reqin-log
|
|
|
|
# Load mod-reqin-log
|
|
LoadModule reqin_log_module modules/mod_reqin_log.so
|
|
|
|
# Enable mod-reqin-log with correlator socket
|
|
JsonSockLogEnabled On
|
|
JsonSockLogSocket "/var/run/logcorrelator/http.socket"
|
|
JsonSockLogHeaders X-Request-Id User-Agent Referer X-Forwarded-For \
|
|
Sec-CH-UA Sec-CH-UA-Mobile Sec-CH-UA-Platform \
|
|
Sec-Fetch-Dest Sec-Fetch-Mode Sec-Fetch-Site \
|
|
Accept Accept-Language Accept-Encoding Content-Type
|
|
JsonSockLogMaxHeaders 25
|
|
JsonSockLogMaxHeaderValueLen 256
|
|
JsonSockLogReconnectInterval 5
|
|
JsonSockLogErrorReportInterval 5
|
|
JsonSockLogLevel DEBUG
|
|
|
|
# HTTPS virtual host (port 443 already configured by mod_ssl)
|
|
<VirtualHost *:80>
|
|
ServerName platform.test
|
|
DocumentRoot /var/www/html
|
|
|
|
# Simple test pages
|
|
<Location /health>
|
|
Require all granted
|
|
</Location>
|
|
</VirtualHost>
|