Commit fb7c5ff
| Repository | bojemoi |
| Branch | main |
| Author | Betty |
| Hash | fb7c5ffb383f76bef73929f3d716a83cbf252e23 |
Description
Ollama × Nuclei AI (option 1):
- nuclei_ai.py: NucleiAI class with suggest_tags(), analyze_findings(), generate_templates() (up to 2 custom YAML templates per scan context)
- main.py: scan_details field in ScanRequest, AI template pre-scan pass, merge results, pyyaml added to pip install
- thearm_nuclei: enrich_tags() via Ollama, submit_scan() passes scan_details
- 51-service-ollama.yml: placement via node.labels.nvidia.vgpu instead of hostname
C2 redirector Proxy Protocol (real client IPs in redirector_hits):
- nginx.conf: listen 443 ssl proxy_protocol, log $proxy_protocol_addr
- provision-redirector.sh: –port 443:443/tcp:proxy_proto
- thearm_logpull: FLY_API_TOKEN env var (fix broken –access-token flag), level_re parser (fix rfind(’]’) bug finding wrong bracket)
ZAP/Faraday CPU fix (periodic 100% CPU on meta-69):
- zap_scanner.py: time.sleep(0.15) throttle between Faraday POSTs
- ZAP_CONCURRENCY 3→1, resource limits on zaproxy (2CPU/4G), zap-scanner (0.5CPU/256M), faraday (1.5CPU/2G)
Housekeeping:
- startover.sh: force-restart nuclei-api after borodino deploy
- Remove vulnx service (orphaned, superseded by nuclei)
Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com