corvée(images) optimise les derniers téléversements

corvée(images) ajoute les derniers téléversements
corvée(images) optimise les images
2026-05-03 15:24:26 +02:00 · 2026-05-03 14:54:41 +02:00 · 2026-04-28 11:18:26 +02:00 · 2026-04-28 11:08:34 +02:00 · 2026-04-27 23:16:21 +02:00 · 2026-04-27 23:15:04 +02:00
1032 changed files with 189234 additions and 283290 deletions
--- a/.gitignore
+++ b/.gitignore
@ -60,7 +60,6 @@ containers/conf/angie/modules-available
 containers/conf/angie/modules-enabled
 containers/conf/angie/scripts
 containers/conf/angie/snippets
-containers/conf/angie/http-waf

 # Formateurs
 .php-cs-fixer.cache
--- a/.npmrc
+++ b/.npmrc
@ -0,0 +1,2 @@
+# Nécessaire pour better-typescript-lib  
+public-hoist-pattern[]=@typescript/*
--- a/.oxlintrc.json
+++ b/.oxlintrc.json
@ -0,0 +1,38 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "env": { "browser": true, "es2020": true, "es2022": true },
+  "categories": {
+    "correctness": "error",
+    "nursery": "error",
+    "pedantic": "error",
+    "perf": "warn",
+    "restriction": "error",
+    "style": "warn",
+    "suspicious": "error"
+  },
+  "plugins": ["jsdoc", "promise", "unicorn", "jsdoc", "oxc", "promise", "typescript", "unicorn"],
+  "rules": {
+    "import/export": "error",
+    "no-array-for-each": "off",
+    "no-async-await": "off",
+    "no-console": "off",
+    "no-magic-numbers": "warn",
+    "no-map-spread": "off",
+    "no-misused-promises": "off",
+    "no-optional-chaining": "off",
+    "no-rest-spread-properties": "off",
+    "no-ternary": "off",
+    "no-undefined": "off",
+    "no-unused-expressions": "off",
+    "no-void": "off",
+    "prefer-await-to-then": "off",
+    "promise/prefer-await-to-callbacks": "off",
+    "sort-imports": "off",
+    "typescript/array-type": ["error", { "default": "generic", "readonly": "generic" }],
+    "typescript/consistent-indexed-object-style": ["error", "record"],
+    "typescript/consistent-type-imports": "error",
+    "typescript/explicit-function-return-type": "warn",
+    "unicorn/prefer-dom-node-dataset": "off",
+    "yoda": ["error", "never"]
+  }
+}
--- a/.php-cs-fixer.dist.php
+++ b/.php-cs-fixer.dist.php
@ -1,267 +1,261 @@
-<?php
-
-declare(strict_types=1);
+<?php declare(strict_types=1);

 use PhpCsFixer\Config;
 use PhpCsFixer\Finder;
 use PhpCsFixer\Runner;

 $finder = new Finder()->in(__DIR__)->exclude([
-  'vendor',
-  'web/vendor',
-  'web/wp',
-  'web/app/languages',
-  'web/app/plugins',
-  'web/app/mu-plugins',
+    'vendor',
+    'web/vendor',
+    'web/wp',
+    'web/app/languages',
+    'web/app/plugins',
+    'web/app/mu-plugins',
 ]);

 return new Config()
-  ->setRiskyAllowed(true)
-  ->setRules([
-    'array_syntax'                                     => ['syntax' => 'short'],
-    'assign_null_coalescing_to_coalesce_equal'         => true,
-    'attribute_empty_parentheses'                      => ['use_parentheses' => true],
-    'blank_line_after_namespace'                       => true,
-    'blank_lines_before_namespace'                     => ['min_line_breaks' => 1, 'max_line_breaks' => 2],
-    'cast_spaces'                                      => true,
-    'class_attributes_separation'                      => ['elements' => [
-      'case'         => 'none',
-      'const'        => 'none',
-      'method'       => 'one',
-      'property'     => 'one',
-      'trait_import' => 'none',
-    ]],
-    'class_reference_name_casing'                      => true,
-    'clean_namespace'                                  => true,
-    'combine_consecutive_issets'                       => true,
-    'combine_consecutive_unsets'                       => true,
-    'combine_nested_dirname'                           => true,
-    'comment_to_phpdoc'                                => true,
-    'constant_case'                                    => true,
-    'date_time_immutable'                              => true,
-    'declare_equal_normalize'                          => true,
-    'declare_parentheses'                              => true,
-    'declare_strict_types'                             => true,
-    'dir_constant'                                     => true,
-    'echo_tag_syntax'                                  => true,
-    'encoding'                                         => true,
-    'ereg_to_preg'                                     => true,
-    'error_suppression'                                => true,
-    'explicit_indirect_variable'                       => true,
-    'explicit_string_variable'                         => true,
-    'final_class'                                      => true,
-    'final_internal_class'                             => true,
-    'full_opening_tag'                                 => true,
-    'fully_qualified_strict_types'                     => ['import_symbols' => true],
-    'function_to_constant'                             => true,
-    'global_namespace_import'                          => [
-      'import_classes'   => true,
-      'import_constants' => true,
-      'import_functions' => true,
-    ],
-    'heredoc_to_nowdoc'                                => true,
-    'integer_literal_case'                             => true,
-    'lambda_not_used_import'                           => true,
-    'list_syntax'                                      => true,
-    'logical_operators'                                => true,
-    'long_to_shorthand_operator'                       => true,
-    'lowercase_cast'                                   => true,
-    'lowercase_keywords'                               => true,
-    'lowercase_static_reference'                       => true,
-    'magic_constant_casing'                            => true,
-    'magic_method_casing'                              => true,
-    'mb_str_functions'                                 => true,
-    'modernize_strpos'                                 => ['modernize_stripos' => true],
-    'modernize_types_casting'                          => true,
-    'modifier_keywords'                                => true,
-    'multiline_comment_opening_closing'                => true,
-    'native_constant_invocation'                       => true,
-    'native_function_casing'                           => true,
-    'native_function_invocation'                       => [
-      'include' => ['@compiler_optimized'],
-      'scope'   => 'namespaced',
-      'strict'  => true,
-    ],
-    'native_type_declaration_casing'                   => true,
-    'new_expression_parentheses'                       => true,
-    'no_alias_functions'                               => ['sets' => ['@all']],
-    'no_alias_language_construct_call'                 => true,
-    'no_alternative_syntax'                            => true,
-    'no_binary_string'                                 => true,
-    'no_closing_tag'                                   => true,
-    'no_empty_comment'                                 => true,
-    'no_homoglyph_names'                               => true,
-    'no_leading_import_slash'                          => true,
-    'no_mixed_echo_print'                              => ['use' => 'echo'],
-    'no_multiline_whitespace_around_double_arrow'      => true,
-    'no_multiple_statements_per_line'                  => true,
-    'no_null_property_initialization'                  => true,
-    'no_php4_constructor'                              => true,
-    'no_short_bool_cast'                               => true,
-    'no_trailing_comma_in_singleline'                  => true,
-    'no_trailing_whitespace_in_comment'                => true,
-    'no_unneeded_braces'                               => ['namespaces' => true],
-    'no_unneeded_control_parentheses'                  => ['statements' => [
-      'break',
-      'clone',
-      'continue',
-      'echo_print',
-      'negative_instanceof',
-      'others',
-      'return',
-      'switch_case',
-      'yield',
-      'yield_from',
-    ]],
-    'no_unneeded_final_method'                         => true,
-    'no_unneeded_import_alias'                         => true,
-    'no_unreachable_default_argument_value'            => true,
-    'no_unset_cast'                                    => true,
-    'no_unset_on_property'                             => true,
-    'no_unused_imports'                                => true,
-    'no_useless_concat_operator'                       => true,
-    'no_useless_nullsafe_operator'                     => true,
-    'no_useless_printf'                                => true,
-    'no_useless_return'                                => true,
-    'no_useless_sprintf'                               => true,
-    'no_whitespace_before_comma_in_array'              => ['after_heredoc' => true],
-    'non_printable_character'                          => true,
-    'normalize_index_brace'                            => true,
-    'nullable_type_declaration'                        => ['syntax' => 'union'],
-    'nullable_type_declaration_for_default_null_value' => true,
-    'numeric_literal_separator'                        => ['override_existing' => true, 'strategy' => 'use_separator'],
-    'ordered_attributes'                               => true,
-    'ordered_class_elements'                           => ['case_sensitive' => false, 'sort_algorithm' => 'alpha'],
-    'ordered_imports'                                  => ['case_sensitive' => true],
-    'ordered_interfaces'                               => true,
-    'ordered_traits'                                   => true,
-    'ordered_types'                                    => ['null_adjustment' => 'always_last'],
-    'phpdoc_readonly_class_comment_to_keyword'         => true,
-    'phpdoc_to_param_type'                             => true,
-    'phpdoc_to_property_type'                          => true,
-    'phpdoc_to_return_type'                            => true,
-    'pow_to_exponentiation'                            => true,
-    'protected_to_private'                             => true,
-    'psr_autoloading'                                  => true,
-    'random_api_migration'                             => ['replacements' => [
-      'getrandmax' => 'mt_getrandmax',
-      'rand'       => 'mt_rand',
-      'srand'      => 'mt_srand',
-    ]],
-    'return_assignment'                                => true,
-    'self_accessor'                                    => true,
-    'self_static_accessor'                             => true,
-    'set_type_to_cast'                                 => true,
-    'short_scalar_cast'                                => true,
-    'simple_to_complex_string_variable'                => true,
-    'simplified_null_return'                           => true,
-    'single_class_element_per_statement'               => true,
-    'single_import_per_statement'                      => true,
-    'single_line_after_imports'                        => true,
-    'single_line_comment_spacing'                      => true,
-    'single_line_comment_style'                        => true,
-    'single_line_empty_body'                           => true,
-    'single_trait_insert_per_statement'                => true,
-    'standardize_not_equals'                           => true,
-    'static_lambda'                                    => true,
-    'strict_comparison'                                => true,
-    'strict_param'                                     => true,
-    'string_implicit_backslashes'                      => true,
-    'string_length_to_empty'                           => true,
-    'switch_continue_to_break'                         => true,
-    'ternary_to_null_coalescing'                       => true,
-    'trim_array_spaces'                                => true,
-    'use_arrow_functions'                              => true,
-    'void_return'                                      => true,
-    'whitespace_after_comma_in_array'                  => ['ensure_single_space' => true],
-    // ---
-    // Each line of multi-line DocComments must have an asterisk [PSR-5] and must be aligned with the first one.
-    'align_multiline_comment' => ['comment_type' => 'all_multiline'],
-    // There should not be blank lines between docblock and the documented element.
-    'no_blank_lines_after_phpdoc' => true,
-    // There should not be empty PHPDoc blocks.
-    'no_empty_phpdoc' => true,
-    // Removes @param, @return and @var tags that don't provide any useful information.
-    'no_superfluous_phpdoc_tags' => [
-      'allow_hidden_params' => false,
-      'allow_mixed'         => false,
-      'allow_unused_params' => false,
-    ],
-    // PHPDoc should contain @param for all params.
-    'phpdoc_add_missing_param_annotation' => ['only_untyped' => false],
-    // All items of the given PHPDoc tags must be either left-aligned or (by default) aligned vertically.
-    'phpdoc_align' => true,
-    // PHPDoc annotation descriptions should not be a sentence.
-    'phpdoc_annotation_without_dot' => true,
-    // PHPDoc array<T> type must be used instead of T[].
-    'phpdoc_array_type' => true,
-    // Docblocks should have the same indentation as the documented subject.
-    'phpdoc_indent' => true,
-    // Fixes PHPDoc inline tags.
-    'phpdoc_inline_tag_normalizer' => true,
-    // Changes doc blocks from single to multi line, or reversed. Works for class constants, properties and methods only.
-    'phpdoc_line_span' => ['const' => 'single', 'method' => 'multi', 'property' => 'single'],
-    // PHPDoc list type must be used instead of array without a key.
-    'phpdoc_list_type' => false,
-    // @access annotations must be removed from PHPDoc.
-    'phpdoc_no_access' => true,
-    // No alias PHPDoc tags should be used.
-    'phpdoc_no_alias_tag' => true,
-    // @return void and @return null annotations must be removed from PHPDoc.
-    'phpdoc_no_empty_return' => false,
-    // @package and @subpackage annotations must be removed from PHPDoc.
-    'phpdoc_no_package' => true,
-    // Classy that does not inherit must not have @inheritdoc tags.
-    'phpdoc_no_useless_inheritdoc' => true,
-    // Annotations in PHPDoc should be ordered in defined sequence.
-    'phpdoc_order' => true,
-    // Order PHPDoc tags by value.
-    'phpdoc_order_by_value' => true,
-    // Orders all @param annotations in DocBlocks according to method signature.
-    'phpdoc_param_order' => true,
-    // The type of @return annotations of methods returning a reference to itself must the configured one.
-    'phpdoc_return_self_reference' => true,
-    // Scalar types should always be written in the same form. int not integer, bool not boolean, float not real or double.
-    'phpdoc_scalar' => ['types' => [
-      'boolean',
-      'callback',
-      'double',
-      'integer',
-      'never-return',
-      'never-returns',
-      'no-return',
-      'real',
-      'str',
-    ]],
-    // Annotations in PHPDoc should be grouped together so that annotations of the same type immediately follow each other. Annotations of a different type are separated by a single blank line.
-    'phpdoc_separation' => [
-      'groups'                    => [
-        ['Annotation', 'NamedArgumentConstructor', 'Target'],
-        ['author', 'copyright', 'license'],
-        ['category', 'package', 'subpackage'],
-        ['property', 'property-read', 'property-write'],
-        ['deprecated', 'link', 'see', 'since'],
-      ],
-      'skip_unlisted_annotations' => false,
-    ],
-    // Single line @var PHPDoc should have proper spacing.
-    'phpdoc_single_line_var_spacing' => true,
-    // PHPDoc summary should end in either a full stop, exclamation mark, or question mark.
-    'phpdoc_summary' => true,
-    // Docblocks should only be used on structural elements.
-    'phpdoc_to_comment' => false,
-    // PHPDoc should start and end with content, excluding the very first and last line of the docblocks.
-    'phpdoc_trim' => true,
-    // Removes extra blank lines after summary and after description in PHPDoc.
-    'phpdoc_trim_consecutive_blank_line_separation' => true,
-    // The correct case must be used for standard PHP types in PHPDoc.
-    'phpdoc_types' => true,
-    // Sorts PHPDoc types.
-    'phpdoc_types_order' => ['null_adjustment' => 'always_last'],
-    // @var and @type annotations must have type and name in the correct order.
-    'phpdoc_var_annotation_correct_order' => true,
-    // @var and @type annotations of classy properties should not contain the name.
-    'phpdoc_var_without_name' => true,
-  ])
-  ->setFinder($finder)
-  ->setParallelConfig(Runner\Parallel\ParallelConfigFactory::detect());
+    ->setRiskyAllowed(true)
+    ->setRules([
+        'array_syntax' => ['syntax' => 'short'],
+        'assign_null_coalescing_to_coalesce_equal' => true,
+        'attribute_empty_parentheses' => ['use_parentheses' => true],
+        'blank_line_after_namespace' => true,
+        'blank_lines_before_namespace' => ['min_line_breaks' => 1, 'max_line_breaks' => 2],
+        'cast_spaces' => true,
+        'class_attributes_separation' => ['elements' => [
+            'case' => 'none',
+            'const' => 'none',
+            'method' => 'one',
+            'property' => 'one',
+            'trait_import' => 'none',
+        ]],
+        'class_reference_name_casing' => true,
+        'clean_namespace' => true,
+        'combine_consecutive_issets' => true,
+        'combine_consecutive_unsets' => true,
+        'combine_nested_dirname' => true,
+        'comment_to_phpdoc' => true,
+        'constant_case' => true,
+        'date_time_immutable' => true,
+        'declare_equal_normalize' => true,
+        'declare_parentheses' => true,
+        'declare_strict_types' => true,
+        'dir_constant' => true,
+        'echo_tag_syntax' => true,
+        'encoding' => true,
+        'ereg_to_preg' => true,
+        'error_suppression' => true,
+        'explicit_indirect_variable' => true,
+        'explicit_string_variable' => true,
+        'final_class' => true,
+        'final_internal_class' => true,
+        'full_opening_tag' => true,
+        'fully_qualified_strict_types' => ['import_symbols' => true],
+        'function_to_constant' => true,
+        'global_namespace_import' => ['import_classes' => true, 'import_constants' => true, 'import_functions' => true],
+        'heredoc_to_nowdoc' => true,
+        'integer_literal_case' => true,
+        'lambda_not_used_import' => true,
+        'list_syntax' => true,
+        'logical_operators' => true,
+        'long_to_shorthand_operator' => true,
+        'lowercase_cast' => true,
+        'lowercase_keywords' => true,
+        'lowercase_static_reference' => true,
+        'magic_constant_casing' => true,
+        'magic_method_casing' => true,
+        'mb_str_functions' => true,
+        'modernize_strpos' => ['modernize_stripos' => true],
+        'modernize_types_casting' => true,
+        'modifier_keywords' => true,
+        'multiline_comment_opening_closing' => true,
+        'native_constant_invocation' => true,
+        'native_function_casing' => true,
+        'native_function_invocation' => [
+            'include' => ['@compiler_optimized'],
+            'scope' => 'namespaced',
+            'strict' => true,
+        ],
+        'native_type_declaration_casing' => true,
+        'new_expression_parentheses' => true,
+        'no_alias_functions' => ['sets' => ['@all']],
+        'no_alias_language_construct_call' => true,
+        'no_alternative_syntax' => true,
+        'no_binary_string' => true,
+        'no_closing_tag' => true,
+        'no_empty_comment' => true,
+        'no_homoglyph_names' => true,
+        'no_leading_import_slash' => true,
+        'no_mixed_echo_print' => ['use' => 'echo'],
+        'no_multiline_whitespace_around_double_arrow' => true,
+        'no_multiple_statements_per_line' => true,
+        'no_null_property_initialization' => true,
+        'no_php4_constructor' => true,
+        'no_short_bool_cast' => true,
+        'no_trailing_comma_in_singleline' => true,
+        'no_trailing_whitespace_in_comment' => true,
+        'no_unneeded_braces' => ['namespaces' => true],
+        'no_unneeded_control_parentheses' => ['statements' => [
+            'break',
+            'clone',
+            'continue',
+            'echo_print',
+            'negative_instanceof',
+            'others',
+            'return',
+            'switch_case',
+            'yield',
+            'yield_from',
+        ]],
+        'no_unneeded_final_method' => true,
+        'no_unneeded_import_alias' => true,
+        'no_unreachable_default_argument_value' => true,
+        'no_unset_cast' => true,
+        'no_unset_on_property' => true,
+        'no_unused_imports' => true,
+        'no_useless_concat_operator' => true,
+        'no_useless_nullsafe_operator' => true,
+        'no_useless_printf' => true,
+        'no_useless_return' => true,
+        'no_useless_sprintf' => true,
+        'no_whitespace_before_comma_in_array' => ['after_heredoc' => true],
+        'non_printable_character' => true,
+        'normalize_index_brace' => true,
+        'nullable_type_declaration' => ['syntax' => 'union'],
+        'nullable_type_declaration_for_default_null_value' => true,
+        'numeric_literal_separator' => ['override_existing' => true, 'strategy' => 'use_separator'],
+        'ordered_attributes' => true,
+        'ordered_class_elements' => ['case_sensitive' => false, 'sort_algorithm' => 'alpha'],
+        'ordered_imports' => ['case_sensitive' => true],
+        'ordered_interfaces' => true,
+        'ordered_traits' => true,
+        'ordered_types' => ['null_adjustment' => 'always_last'],
+        'phpdoc_readonly_class_comment_to_keyword' => true,
+        'phpdoc_to_param_type' => true,
+        'phpdoc_to_property_type' => true,
+        'phpdoc_to_return_type' => true,
+        'pow_to_exponentiation' => true,
+        'protected_to_private' => true,
+        'psr_autoloading' => true,
+        'random_api_migration' => ['replacements' => [
+            'getrandmax' => 'mt_getrandmax',
+            'rand' => 'mt_rand',
+            'srand' => 'mt_srand',
+        ]],
+        'return_assignment' => true,
+        'self_accessor' => true,
+        'self_static_accessor' => true,
+        'set_type_to_cast' => true,
+        'short_scalar_cast' => true,
+        'simple_to_complex_string_variable' => true,
+        'simplified_null_return' => true,
+        'single_class_element_per_statement' => true,
+        'single_import_per_statement' => true,
+        'single_line_after_imports' => true,
+        'single_line_comment_spacing' => true,
+        'single_line_comment_style' => true,
+        'single_line_empty_body' => true,
+        'single_trait_insert_per_statement' => true,
+        'standardize_not_equals' => true,
+        'static_lambda' => true,
+        'strict_comparison' => true,
+        'strict_param' => true,
+        'string_implicit_backslashes' => true,
+        'string_length_to_empty' => true,
+        'switch_continue_to_break' => true,
+        'ternary_to_null_coalescing' => true,
+        'trim_array_spaces' => true,
+        'use_arrow_functions' => true,
+        'void_return' => true,
+        'whitespace_after_comma_in_array' => ['ensure_single_space' => true],
+        // ---
+        // Each line of multi-line DocComments must have an asterisk [PSR-5] and must be aligned with the first one.
+        'align_multiline_comment' => ['comment_type' => 'all_multiline'],
+        // There should not be blank lines between docblock and the documented element.
+        'no_blank_lines_after_phpdoc' => true,
+        // There should not be empty PHPDoc blocks.
+        'no_empty_phpdoc' => true,
+        // Removes @param, @return and @var tags that don't provide any useful information.
+        'no_superfluous_phpdoc_tags' => [
+            'allow_hidden_params' => false,
+            'allow_mixed' => false,
+            'allow_unused_params' => false,
+        ],
+        // PHPDoc should contain @param for all params.
+        'phpdoc_add_missing_param_annotation' => ['only_untyped' => false],
+        // All items of the given PHPDoc tags must be either left-aligned or (by default) aligned vertically.
+        'phpdoc_align' => true,
+        // PHPDoc annotation descriptions should not be a sentence.
+        'phpdoc_annotation_without_dot' => true,
+        // PHPDoc array<T> type must be used instead of T[].
+        'phpdoc_array_type' => true,
+        // Docblocks should have the same indentation as the documented subject.
+        'phpdoc_indent' => true,
+        // Fixes PHPDoc inline tags.
+        'phpdoc_inline_tag_normalizer' => true,
+        // Changes doc blocks from single to multi line, or reversed. Works for class constants, properties and methods only.
+        'phpdoc_line_span' => ['const' => 'single', 'method' => 'multi', 'property' => 'single'],
+        // PHPDoc list type must be used instead of array without a key.
+        'phpdoc_list_type' => false,
+        // @access annotations must be removed from PHPDoc.
+        'phpdoc_no_access' => true,
+        // No alias PHPDoc tags should be used.
+        'phpdoc_no_alias_tag' => true,
+        // @return void and @return null annotations must be removed from PHPDoc.
+        'phpdoc_no_empty_return' => false,
+        // @package and @subpackage annotations must be removed from PHPDoc.
+        'phpdoc_no_package' => true,
+        // Classy that does not inherit must not have @inheritdoc tags.
+        'phpdoc_no_useless_inheritdoc' => true,
+        // Annotations in PHPDoc should be ordered in defined sequence.
+        'phpdoc_order' => true,
+        // Order PHPDoc tags by value.
+        'phpdoc_order_by_value' => true,
+        // Orders all @param annotations in DocBlocks according to method signature.
+        'phpdoc_param_order' => true,
+        // The type of @return annotations of methods returning a reference to itself must the configured one.
+        'phpdoc_return_self_reference' => true,
+        // Scalar types should always be written in the same form. int not integer, bool not boolean, float not real or double.
+        'phpdoc_scalar' => ['types' => [
+            'boolean',
+            'callback',
+            'double',
+            'integer',
+            'never-return',
+            'never-returns',
+            'no-return',
+            'real',
+            'str',
+        ]],
+        // Annotations in PHPDoc should be grouped together so that annotations of the same type immediately follow each other. Annotations of a different type are separated by a single blank line.
+        'phpdoc_separation' => [
+            'groups' => [
+                ['Annotation', 'NamedArgumentConstructor', 'Target'],
+                ['author', 'copyright', 'license'],
+                ['category', 'package', 'subpackage'],
+                ['property', 'property-read', 'property-write'],
+                ['deprecated', 'link', 'see', 'since'],
+            ],
+            'skip_unlisted_annotations' => false,
+        ],
+        // Single line @var PHPDoc should have proper spacing.
+        'phpdoc_single_line_var_spacing' => true,
+        // PHPDoc summary should end in either a full stop, exclamation mark, or question mark.
+        'phpdoc_summary' => true,
+        // Docblocks should only be used on structural elements.
+        'phpdoc_to_comment' => false,
+        // PHPDoc should start and end with content, excluding the very first and last line of the docblocks.
+        'phpdoc_trim' => true,
+        // Removes extra blank lines after summary and after description in PHPDoc.
+        'phpdoc_trim_consecutive_blank_line_separation' => true,
+        // The correct case must be used for standard PHP types in PHPDoc.
+        'phpdoc_types' => true,
+        // Sorts PHPDoc types.
+        'phpdoc_types_order' => ['null_adjustment' => 'always_last'],
+        // @var and @type annotations must have type and name in the correct order.
+        'phpdoc_var_annotation_correct_order' => true,
+        // @var and @type annotations of classy properties should not contain the name.
+        'phpdoc_var_without_name' => true,
+    ])
+    ->setFinder($finder)
+    ->setParallelConfig(Runner\Parallel\ParallelConfigFactory::detect());
--- a/.phpactor.json
+++ b/.phpactor.json
@ -1,10 +1,16 @@
 {
  "$schema": "./phpactor.schema.json",
+  "indexer.exclude_patterns": [
+    "/vendor/**/Tests/**/*",
+    "/vendor/**/tests/**/*",
+    "/var/cache/**/*",
+    "/vendor/composer/**/*"
+  ],
  "language_server.diagnostic_outsource_timeout": 5,
+  "language_server.diagnostics_on_update": false,
  "language_server.diagnostics_on_save": true,
-  "language_server.diagnostics_on_update": true,
  "language_server_highlight.enabled": true,
-  "language_server_php_cs_fixer.enabled": false,
+  "language_server_php_cs_fixer.enabled": true,
  "language_server_phpstan.config": "phpstan.neon",
  "language_server_phpstan.enabled": true,
  "language_server_psalm.enabled": false,
--- a/.phpantom.toml
+++ b/.phpantom.toml
@ -1,19 +0,0 @@
-# :schema: https://github.com/AJenbo/phpantom_lsp/raw/main/config-schema.json
-
-[php]
-  # Override the detected PHP version (default: inferred from composer.json, or 8.5).
-  # version = "8.5"
-  #
-
-[diagnostics]
-  extra-arguments          = true
-  # Report member access on subjects whose type could not be resolved.
-  # Useful for discovering gaps in type coverage. Off by default.
-  unresolved-member-access = false
-
-[indexing]
-  # How PHPantom discovers classes across the workspace.
-  #   "composer" (default) - use Composer classmap, self-scan on fallback
-  #   "self"    - always self-scan, ignore Composer classmap
-  #   "none"    - no proactive scanning, Composer classmap only
-  strategy = "composer"
--- a/.prettierignore
+++ b/.prettierignore
@ -0,0 +1,29 @@
+# Tout ce qui est traité par dprint
+*.css
+*.html
+*.js
+*.json
+!package.json
+*.jsonc
+*.md
+*.scss
+*.ts
+*.twig
+*.yml
+*.yaml
+
+# Tout sauf le thème
+.ddev
+web/app/*
+!web/app/themes
+web/app/themes/haiku-atelier-2024/assets
+web/app/languages
+web/app/plugins
+web/vendor
+
+# Dépendances
+composer.lock
+pnpm-lock.yaml
+
+# Jujutsu
+.jj
--- a/.swcrc
+++ b/.swcrc
@ -0,0 +1,31 @@
+{
+  "$schema": "https://swc.rs/schema.json",
+  "jsc": {
+    "externalHelpers": false,
+    "keepClassNames": false,
+    "loose": false,
+    "minify": {
+      "compress": true,
+      "mangle": true
+    },
+    "parser": {
+      "decorators": false,
+      "decoratorsBeforeExport": false,
+      "dynamicImport": false,
+      "exportDefaultFrom": false,
+      "exportNamespaceFrom": false,
+      "functionBind": false,
+      "importMeta": false,
+      "jsx": false,
+      "privateMethod": false,
+      "syntax": "typescript",
+      "topLevelAwait": false,
+      "tsx": false
+    },
+    "preserveAllComments": false,
+    "target": "es2020",
+    "transform": null
+  },
+  "minify": true,
+  "sourceMaps": true
+}
--- a/.zed/haa.txt
+++ b/.zed/haa.txt
@ -0,0 +1,17 @@
+// {
+//   "languages": {
+//     "PHP": {
+//       "format_on_save": "on",
+//       "formatter": {
+//         "external": {
+//           "command": "mago",
+//           "arguments": ["format", "--stdin-input"] // "command": "bash",
+//           // "arguments": [
+//           //   "-c",
+//           //   "cat > /tmp/zed_php_cs_fixer && ./vendor/bin/php-cs-fixer fix --using-cache=no --quiet /tmp/zed_php_cs_fixer && cat /tmp/zed_php_cs_fixer"
+//           // ]
+//         }
+//       }
+//     }
+//   }
+// }
--- a/.zed/settings.json
+++ b/.zed/settings.json
@ -1,47 +1,17 @@
 {
  "language_servers": [
    "!biome",
-    "!cspell",
    "!deno",
-    "!eslint",
-    "!harper-ls",
    "!intelephense",
-    "!oxc",
-    "!oxfmt",
-    "!oxlint",
-    "!phptools",
    "!prettier",
    "!tailwindcss-language-server",
-    "!tsgo",
    "!vtsls",
    "..."
  ],
-  "lsp": {
-    "css-variables": {
-      "settings": {
-        "cssVariables": {
-          "blacklistFolders": [
-            "**/*.min.css",
-            "**/dist/**",
-            "**/node_modules/**"
-          ],
-          "lookupFiles": [
-            "**/*.scss"
-          ],
-          "undefinedVarFallback": "info"
-        }
-      }
-    },
-    "oxlint": {
-      "initialization_options": {
-        "settings": {
-          "configPath": "cfg/oxlint.config.ts",
-          "disableNestedConfig": false,
-          "fixKind": "safe_fix",
-          "run": "onSave",
-          "unusedDisableDirectives": "deny"
-        }
-      }
+  "languages": {
+    "PHP": {
+      "format_on_save": "on",
+      "formatter": { "external": { "command": "mago", "arguments": ["format", "--stdin-input"] } }
    }
  }
 }
--- a/README.md
+++ b/README.md
@ -2,23 +2,6 @@

 ## Dépendances

-### JavaScript et TypeScript
-
-#### Dépendances
-
- Effect
- a11y-dialog
- lit-html
-
-#### Dépendances de développement
-
- ESLint
- Oxlint
- Prettier
- SASS
- Stylelint
- Vite
-
 ### PHP

 #### Dépendances
--- a/aube-lock.yaml
+++ b/aube-lock.yaml
--- a/aube-workspace.yaml
+++ b/aube-workspace.yaml
@ -1,6 +0,0 @@
-jailBuilds: false
-nodeLinker: isolated
-packageManagerStrict: true
-packageManagerStrictVersion: true
-trustPolicy: off
-useBetaCli: true
--- a/biome.json
+++ b/biome.json
@ -0,0 +1,48 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.0.4/schema.json",
+  "assist": { "enabled": false },
+  "css": { "formatter": { "enabled": false }, "linter": { "enabled": true } },
+  "files": {
+    "experimentalScannerIgnores": [
+      "*.min.js",
+      "vendor",
+      "web/app/plugins",
+      "web/app/themes/haiku-atelier-2024/assets",
+      "web/wp"
+    ],
+    "ignoreUnknown": true,
+    "maxSize": 100000000
+  },
+  "formatter": { "enabled": false },
+  "graphql": { "formatter": { "enabled": false }, "linter": { "enabled": true } },
+  "json": { "formatter": { "enabled": false }, "linter": { "enabled": true } },
+  "linter": {
+    "enabled": false,
+    "rules": {
+      "complexity": { "noForEach": "off" },
+      "nursery": {
+        "recommended": true,
+        "useSortedClasses": {
+          "fix": "unsafe",
+          "level": "error",
+          "options": { "attributes": ["class"], "functions": [""] }
+        }
+      },
+      "recommended": true,
+      "style": {
+        "noInferrableTypes": "error",
+        "noNonNullAssertion": "off",
+        "noParameterAssign": "error",
+        "noUnusedTemplateLiteral": "error",
+        "noUselessElse": "error",
+        "recommended": true,
+        "useAsConstAssertion": "error",
+        "useDefaultParameterLast": "error",
+        "useEnumInitializers": "error",
+        "useNumberNamespace": "error",
+        "useSelfClosingElements": "error",
+        "useSingleVarDeclarator": "error"
+      }
+    }
+  }
+}
--- a/bun.lock
+++ b/bun.lock
--- a/cfg/eslint.config.ts
+++ b/cfg/eslint.config.ts
@ -1,16 +0,0 @@
-import type { Config } from "eslint/config";
-
-import { configTypescriptNavigateur } from "@gcch/configuration-eslint";
-import { defineConfig } from "eslint/config";
-
-const esLintConfig: ReadonlyArray<Config> = defineConfig(
-  {
-    ignores: [".cache", "web/app/plugins", "**/*.js"],
-  },
-  [...configTypescriptNavigateur],
-  {
-    files: ["*.ts", "web/app/themes/haiku-atelier-2024/src/**/*.ts"],
-  },
-);
-
-export default esLintConfig;
--- a/cfg/oxlint.config.ts
+++ b/cfg/oxlint.config.ts
@ -1,13 +0,0 @@
-import gcchConfig from "@gcch/configuration-oxlint";
-import type { OxlintConfig } from "oxlint";
-
-const config: OxlintConfig = {
-  ...gcchConfig,
-  // Désactive la configuration liée à Astro.
-  overrides: [],
-  globals: {
-    Bun: "readonly",
-  },
-};
-
-export default config;
--- a/cfg/playwright.config.ts
+++ b/cfg/playwright.config.ts
@ -1,50 +0,0 @@
-import { defineConfig, devices, PlaywrightTestConfig } from "@playwright/test";
-
-const playwrightConfig: PlaywrightTestConfig = defineConfig({
-  fullyParallel: true,
-  projects: [
-    {
-      name: "desktop-chromium-1920",
-      use: { ...devices["Desktop Chrome"], viewport: { height: 1080, width: 1920 } },
-    },
-    {
-      name: "desktop-firefox-1920",
-      use: { ...devices["Desktop Firefox"], viewport: { height: 1080, width: 1920 } },
-    },
-    // {
-    //   name: "tablet-chromium-portrait",
-    //   use: { ...devices["Galaxy Tab S9"] },
-    // },
-    // {
-    //   name: "tablet-chromium-landscape",
-    //   use: { ...devices["Galaxy Tab S9 landscape"] },
-    // },
-    // {
-    //   name: "mobile-chromium-portrait",
-    //   use: { ...devices["Pixel 7"] },
-    // },
-    // {
-    //   name: "mobile-chromium-landscape",
-    //   use: { ...devices["Pixel 7 landscape"] },
-    // },
-  ],
-  reporter: "list",
-  retries: 1,
-  testDir: "../tests",
-  timeout: 10_000,
-  use: {
-    baseURL: "https://haikuatelier.gcch.local",
-    clientCertificates: [
-      {
-        origin: "https://haikuatelier.gcch.local",
-        certPath: "../containers/data/certs/_wildcard.gcch.local.pem",
-        keyPath: "../containers/data/certs/_wildcard.gcch.local-key.pem",
-      },
-    ],
-    ignoreHTTPSErrors: true,
-    trace: "retry-with-trace",
-  },
-  workers: "50%",
-});
-
-export default playwrightConfig;
--- a/cfg/prettier.config.ts
+++ b/cfg/prettier.config.ts
@ -1,7 +0,0 @@
-import { configClassique } from "@gcch/configuration-prettier";
-
-const config = {
-  ...configClassique,
-};
-
-export default config;
--- a/cfg/prettierignore
+++ b/cfg/prettierignore
@ -1,39 +0,0 @@
-# Tout ce qui est traité par treefmt
-*.css
-*.html
-*.js
-*.json
-*.md
-*.mjs
-*.mts
-*.php
-*.scss
-*.sh
-*.ts
-*.xml
-*.yaml
-*.yml
-!package.json
-
-# Cache
-.cache
-
-# Tout sauf le thème
-**/vendor
-**/web/app/languages
-**/web/app/mu-plugins
-**/web/app/plugins
-**/web/app/themes/haiku-atelier-2024/assets
-**/web/app/themes/twentytwentyfour
-**/web/app/uploads
-**/web/wp
-
-# Dépendances
-composer.lock
-bun.lock
-
-# Jujutsu
-.jj/
-
-# Zed
-.zed/
--- a/cfg/stylelint.config.ts
+++ b/cfg/stylelint.config.ts
@ -1,63 +0,0 @@
-import { Array as FxArray, pipe } from "effect";
-import type stylelint from "stylelint";
-import { propertyGroups } from "stylelint-config-clean-order";
-
-/**
- * Définition d'un groupe de Propriétés _CSS_ du plugin `stylelint-config-clean-order` pour _Stylelint_.
- */
-type StylelintConfigCleanOrderPropertyGroup = {
-  emptyLineBefore: "never" | "threshold";
-  noEmptyLineBetween: boolean;
-  properties: ReadonlyArray<string> | string;
-};
-
-const ordreProprietes: ReadonlyArray<StylelintConfigCleanOrderPropertyGroup> = pipe(
-  Array.from(propertyGroups),
-  FxArray.map((properties: ReadonlyArray<string>) => ({
-    emptyLineBefore: "never",
-    noEmptyLineBetween: true,
-    properties,
-  })),
-);
-
-const stylelintConfig: stylelint.Config = {
-  extends: ["stylelint-config-standard-scss", "stylelint-config-sass-guidelines", "stylelint-config-clean-order"],
-  plugins: ["stylelint-declaration-block-no-ignored-properties"],
-  rules: {
-    "@stylistic/function-parentheses-space-inside": undefined,
-    "@stylistic/selector-list-comma-newline-after": undefined,
-    "@stylistic/string-quotes": undefined,
-    "alpha-value-notation": ["percentage"],
-    "color-function-notation": "modern",
-    "color-no-hex": true,
-    "custom-property-pattern": undefined,
-    "declaration-block-no-duplicate-custom-properties": true,
-    "declaration-block-no-duplicate-properties": true,
-    "declaration-block-no-redundant-longhand-properties": true,
-    "declaration-block-no-shorthand-property-overrides": true,
-    "function-disallowed-list": ["rgba", "hsla", "rgb", "hsl"],
-    "max-nesting-depth": undefined,
-    "no-descending-specificity": undefined,
-    "no-duplicate-selectors": [
-      true,
-      {
-        disallowInList: false,
-      },
-    ],
-    "order/properties-order": [
-      ordreProprietes,
-      {
-        severity: "error",
-        unspecified: "bottomAlphabetical",
-      },
-    ],
-    "plugin/declaration-block-no-ignored-properties": true,
-    "selector-class-pattern": undefined,
-    "selector-id-pattern": undefined,
-    "selector-max-compound-selectors": undefined,
-    "selector-max-id": undefined,
-    "selector-no-qualifying-type": undefined,
-  },
-};
-
-export default stylelintConfig;
--- a/compose.yaml
+++ b/compose.yaml
@ -25,6 +25,33 @@ services:
    restart: "unless-stopped"
    volumes:
      - "db-data:/var/lib/mysql:rw"
+  jaeger:
+    container_name: "haikuatelier.fr-jaeger"
+    environment:
+      - "COLLECTOR_OTLP_ENABLED=true"
+    healthcheck:
+      interval: "5s"
+      retries: 3
+      start_period: "5s"
+      test:
+        - "CMD"
+        - "wget"
+        - "--spider"
+        - "http://localhost:16686"
+      timeout: "2s"
+    image: "cr.jaegertracing.io/jaegertracing/jaeger:latest"
+    networks:
+      - "haiku-network"
+    ports:
+      - "6831:6831/udp"
+      - "6832:6832/udp"
+      - "5778:5778"
+      - "16686:16686"
+      - "4317:4317"
+      - "4318:4318"
+      - "14250:14250"
+      - "14268:14268"
+      - "14269:14269"
  proxy:
    container_name: "haikuatelier.fr-proxy"
    depends_on:
@ -45,7 +72,6 @@ services:
    restart: "on-failure:3"
    volumes:
      - "./containers/conf/angie:/etc/angie:rw"
-      # - "./containers/conf/angie-2:/etc/angie:rw"
      - "./containers/data/certs:/etc/angie/ssl:ro"
      - "./containers/data/angie/logs:/var/log/angie:rw"
      - "./:/var/www/wordpress:rw"
@ -79,10 +105,30 @@ services:
      - "./containers/data/certs:/etc/certs/:ro"
      - "./containers/data/traefik/logs:/var/log/traefik:rw"
      - "/var/run/user/1000/podman/podman.sock:/var/run/docker.sock:ro"
+  valkey:
+    command: "valkey-server /usr/local/etc/valkey/valkey.conf"
+    container_name: "haikuatelier.fr-valkey"
+    env_file:
+      - path: "./.env"
+        required: true
+    healthcheck:
+      interval: "10s"
+      retries: 3
+      test:
+        - "CMD-SHELL"
+        - "valkey-cli ping | grep PONG"
+      timeout: "5s"
+    image: "docker.io/valkey/valkey:9-alpine"
+    restart: "unless-stopped"
+    sysctls:
+      - "net.core.somaxconn=512"
+    volumes:
+      - "./containers/conf/valkey.conf:/usr/local/etc/valkey/valkey.conf:ro"
  wordpress:
    container_name: "haikuatelier.fr-wordpress"
    depends_on:
      - "db"
+      - "valkey"
      - "traefik"
    env_file:
      - path: "./.env"
--- a/composer.json
+++ b/composer.json
@ -1,11 +1,9 @@
 {
-  "$schema": "https://getcomposer.org/schema.json",
-  "authors": [],
-  "autoload": {
-    "psr-4": {
-      "HaikuAtelier\\": "web/app/themes/haiku-atelier-2024/src/inc/"
-    }
-  },
+  "autoload": { "psr-4": { "HaikuAtelier\\": "web/app/themes/haiku-atelier-2024/src/inc/" } },
+  "authors": [
+    { "email": "scott.walkinshaw@gmail.com", "homepage": "https://github.com/swalkinshaw", "name": "Scott Walkinshaw" },
+    { "email": "ben@benword.com", "homepage": "https://github.com/retlehs", "name": "Ben Word" }
+  ],
  "config": {
    "allow-plugins": {
      "carthage-software/mago": true,
@ -14,83 +12,75 @@
      "phpstan/extension-installer": true,
      "roots/wordpress-core-installer": true
    },
-    "classmap-authoritative": true,
    "optimize-autoloader": true,
    "preferred-install": "dist",
    "sort-packages": true
  },
-  "description": "",
+  "description": "WordPress boilerplate with Composer, easier configuration, and an improved folder structure",
  "extra": {
    "installer-paths": {
-      "web/app/mu-plugins/{$name}/": [
-        "type:wordpress-muplugin"
-      ],
-      "web/app/plugins/{$name}/": [
-        "type:wordpress-plugin"
-      ],
-      "web/app/themes/{$name}/": [
-        "type:wordpress-theme"
-      ],
-      "web/vendor/{$vendor}/{$name}": [
-        "htmlburger/carbon-fields"
-      ]
+      "web/app/mu-plugins/{$name}/": ["type:wordpress-muplugin"],
+      "web/app/plugins/{$name}/": ["type:wordpress-plugin"],
+      "web/app/themes/{$name}/": ["type:wordpress-theme"],
+      "web/vendor/{$vendor}/{$name}": ["htmlburger/carbon-fields"]
    },
    "wordpress-install-dir": "web/wp"
  },
-  "minimum-stability": "stable",
-  "name": "gcch/haiku-atelier",
+  "homepage": "https://roots.io/bedrock/",
+  "keywords": ["bedrock", "composer", "roots", "wordpress", "wp", "wp-config"],
+  "license": "MIT",
+  "minimum-stability": "dev",
+  "name": "roots/bedrock",
  "prefer-stable": true,
  "repositories": [
-    {
-      "only": [
-        "wpackagist-plugin/*",
-        "wpackagist-theme/*"
-      ],
-      "type": "composer",
-      "url": "https://wpackagist.org"
-    }
+    { "only": ["wpackagist-plugin/*", "wpackagist-theme/*"], "type": "composer", "url": "https://wpackagist.org" }
  ],
  "require": {
+    "php": ">=8.5",
+    "azjezz/psl": "^4.2",
    "composer/installers": "^2.3",
    "crell/fp": "^1.0",
-    "htmlburger/carbon-fields": "^3.6.9",
-    "illuminate/support": "^13.4",
-    "laravel/helpers": "^1.8.3",
+    "htmlburger/carbon-fields": "^3.6",
+    "illuminate/support": "^12.43",
+    "laravel/helpers": "^1.7.1",
    "log1x/wp-smtp": "^1.0.2",
-    "lstrojny/functional-php": "^1.18",
+    "lstrojny/functional-php": "^1.17",
    "mnsami/composer-custom-directory-installer": "^2.0",
-    "nesbot/carbon": "^3.11.4",
+    "nesbot/carbon": "^3.8.2",
    "oscarotero/env": "^2.1.1",
-    "php": ">=8.5",
-    "php-standard-library/php-standard-library": "^6.1.1",
-    "roots/bedrock-autoloader": "^1.1.0",
-    "roots/bedrock-disallow-indexing": "^2.1",
-    "roots/wordpress": "^6.9.4",
+    "roots/bedrock-autoloader": "^1.0.4",
+    "roots/bedrock-disallow-indexing": "^2.0",
+    "roots/wordpress": "^6.8.1",
    "roots/wp-config": "^1.0",
-    "stripe/stripe-php": "^19.4.1",
-    "symfony/uid": "^8.0.8",
-    "timber/timber": "^2.3.3",
-    "vlucas/phpdotenv": "^5.6.3",
-    "wpackagist-plugin/falcon": "^2.9.3",
-    "wpackagist-plugin/force-regenerate-thumbnails": "^2.3.0",
-    "wpackagist-plugin/query-monitor": "^4.0.5",
-    "wpackagist-plugin/redis-cache": "^2.7.0",
-    "wpackagist-plugin/wc-multishipping": "^3.0.2",
-    "wpackagist-plugin/woo-preview-emails": "^2.2.14",
-    "wpackagist-plugin/woocommerce": "^10.6.2",
-    "wpackagist-plugin/wp-mail-logging": "^1.16.0",
-    "wpackagist-plugin/wp-mail-smtp": "^4.7.1",
-    "wpackagist-plugin/wp-openapi": "^1.0.27",
-    "wpackagist-theme/twentytwentyfour": "^1.4"
+    "stripe/stripe-php": "^16.3",
+    "symfony/uid": "^8",
+    "timber/timber": "^2.3",
+    "vlucas/phpdotenv": "^5.6.1",
+    "wpackagist-plugin/falcon": "^2.8.4",
+    "wpackagist-plugin/force-regenerate-thumbnails": "^2.2.1",
+    "wpackagist-plugin/query-monitor": "^3.17.0",
+    "wpackagist-plugin/redis-cache": "^2.5.4",
+    "wpackagist-plugin/wc-multishipping": "^3.0",
+    "wpackagist-plugin/woo-preview-emails": "^2.2.13",
+    "wpackagist-plugin/woocommerce": "^10",
+    "wpackagist-plugin/wp-mail-logging": "^1.13.1",
+    "wpackagist-plugin/wp-mail-smtp": "^4.2",
+    "wpackagist-plugin/wp-openapi": "^1.0.16",
+    "wpackagist-theme/twentytwentyfour": "^1.3"
  },
  "require-dev": {
-    "friendsofphp/php-cs-fixer": "^3.94.2",
-    "php-standard-library/phpstan-extension": "^2.1",
+    "friendsofphp/php-cs-fixer": "^3.89",
+    "php-standard-library/phpstan-extension": "^2.0",
    "phpstan/extension-installer": "^1.4.3",
-    "phpstan/phpstan": "^2.1.46",
+    "phpstan/phpstan": "^2.0.3",
+    "rector/rector": "^2.2",
    "roave/security-advisories": "dev-latest",
    "szepeviktor/phpstan-wordpress": "2.x-dev",
-    "vincentlanglet/twig-cs-fixer": "^3.14"
+    "vincentlanglet/twig-cs-fixer": "^3.10"
+  },
+  "support": {
+    "forum": "https://discourse.roots.io/category/bedrock",
+    "issues": "https://github.com/roots/bedrock/issues"
  },
  "type": "project"
 }
--- a/composer.lock
+++ b/composer.lock
--- a/config/application.php
+++ b/config/application.php
@ -11,10 +11,10 @@

 declare(strict_types=1);

-use Roots\WPConfig\Config;
-
 use function Env\env;

+use Roots\WPConfig\Config;
+
 // USE_ENV_ARRAY + CONVERT_* + STRIP_QUOTES
 Env\Env::$options = 31;

@ -30,23 +30,26 @@ $root_dir = dirname(__DIR__);
 *
 * @var string
 */
-$webroot_dir = $root_dir . '/web';
+$webroot_dir = $root_dir.'/web';

 /*
 * Use Dotenv to set required environment variables and load .env file in root
 * .env.local will override .env if it exists
 */
-if (file_exists($root_dir . '/.env')) {
-  $env_files = file_exists($root_dir . '/.env.local') ? ['.env', '.env.local'] : ['.env'];
+if (file_exists($root_dir.'/.env')) {
+    $env_files = file_exists($root_dir.'/.env.local') ? [
+        '.env',
+        '.env.local',
+    ] : ['.env'];

-  $dotenv = Dotenv\Dotenv::createImmutable($root_dir, $env_files, false);
+    $dotenv = Dotenv\Dotenv::createImmutable($root_dir, $env_files, false);

-  $dotenv->load();
+    $dotenv->load();

-  $dotenv->required(['WP_HOME', 'WP_SITEURL']);
-  if (!env('DATABASE_URL')) {
-    $dotenv->required(['DB_NAME', 'DB_USER', 'DB_PASSWORD']);
-  }
+    $dotenv->required(['WP_HOME', 'WP_SITEURL']);
+    if (!env('DATABASE_URL')) {
+        $dotenv->required(['DB_NAME', 'DB_USER', 'DB_PASSWORD']);
+    }
 }

 /*
@ -57,7 +60,7 @@ define('WP_ENV', env('WP_ENV') ?: 'production');

 // Infer WP_ENVIRONMENT_TYPE based on WP_ENV
 if (!env('WP_ENVIRONMENT_TYPE') && in_array(WP_ENV, ['production', 'staging', 'development', 'local'], true)) {
-  Config::define('WP_ENVIRONMENT_TYPE', WP_ENV);
+    Config::define('WP_ENVIRONMENT_TYPE', WP_ENV);
 }

 // URLs
@ -66,12 +69,12 @@ Config::define('WP_SITEURL', env('WP_SITEURL'));

 // Custom Content Directory
 Config::define('CONTENT_DIR', '/app');
-Config::define('WP_CONTENT_DIR', $webroot_dir . Config::get('CONTENT_DIR'));
-Config::define('WP_CONTENT_URL', Config::get('WP_HOME') . Config::get('CONTENT_DIR'));
+Config::define('WP_CONTENT_DIR', $webroot_dir.Config::get('CONTENT_DIR'));
+Config::define('WP_CONTENT_URL', Config::get('WP_HOME').Config::get('CONTENT_DIR'));

 // DB settings
 if (env('DB_SSL')) {
-  Config::define('MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL);
+    Config::define('MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL);
 }

 Config::define('DB_NAME', env('DB_NAME'));
@ -83,12 +86,12 @@ Config::define('DB_COLLATE', '');
 $table_prefix = env('DB_PREFIX') ?: 'wp_';

 if (env('DATABASE_URL')) {
-  $dsn = (object) parse_url(env('DATABASE_URL'));
+    $dsn = (object) parse_url(env('DATABASE_URL'));

-  Config::define('DB_NAME', mb_substr($dsn->path, 1));
-  Config::define('DB_USER', $dsn->user);
-  Config::define('DB_PASSWORD', $dsn->pass ?? null);
-  Config::define('DB_HOST', isset($dsn->port) ? "{$dsn->host}:{$dsn->port}" : $dsn->host);
+    Config::define('DB_NAME', mb_substr($dsn->path, 1));
+    Config::define('DB_USER', $dsn->user);
+    Config::define('DB_PASSWORD', $dsn->pass ?? null);
+    Config::define('DB_HOST', isset($dsn->port) ? "{$dsn->host}:{$dsn->port}" : $dsn->host);
 }

 // Authentication Unique Keys and Salts
@ -121,26 +124,26 @@ Config::define('SCRIPT_DEBUG', false);
 ini_set('display_errors', '0');

 // Plugins
-Config::define('WPMU_PLUGIN_DIR', Config::get('WP_CONTENT_DIR') . '/mu-plugins');
-Config::define('WP_PLUGIN_DIR', Config::get('WP_CONTENT_DIR') . '/plugins');
+Config::define('WPMU_PLUGIN_DIR', Config::get('WP_CONTENT_DIR').'/mu-plugins');
+Config::define('WP_PLUGIN_DIR', Config::get('WP_CONTENT_DIR').'/plugins');

 /*
 * Allow WordPress to detect HTTPS when used behind a reverse proxy or a load balancer
 * See https://codex.wordpress.org/Function_Reference/is_ssl#Notes
 */
 if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && 'https' === $_SERVER['HTTP_X_FORWARDED_PROTO']) {
-  $_SERVER['HTTPS'] = 'on';
+    $_SERVER['HTTPS'] = 'on';
 }

-$env_config = __DIR__ . '/environments/' . WP_ENV . '.php';
+$env_config = __DIR__.'/environments/'.WP_ENV.'.php';

 if (file_exists($env_config)) {
-  include_once $env_config;
+    include_once $env_config;
 }

 Config::apply();

 // Bootstrap WordPress
 if (!defined('ABSPATH')) {
-  define('ABSPATH', $webroot_dir . '/wp/');
+    define('ABSPATH', $webroot_dir.'/wp/');
 }
--- a/config/environments/development.php
+++ b/config/environments/development.php
@ -6,11 +6,10 @@

 declare(strict_types=1);

-use Roots\WPConfig\Config;
-
-use function base64_encode;
 use function Env\env;

+use Roots\WPConfig\Config;
+
 Config::define('SAVEQUERIES', true);
 Config::define('WP_DEBUG', true);
 Config::define('WP_DEBUG_DISPLAY', true);
@ -26,10 +25,6 @@ Config::define('DISALLOW_FILE_MODS', false);
 // WooCommerce
 Config::define('WOOCOMMERCE_API_CONSUMER_KEY', env('WOOCOMMERCE_API_CONSUMER_KEY'));
 Config::define('WOOCOMMERCE_API_CONSUMER_SECRET', env('WOOCOMMERCE_API_CONSUMER_SECRET'));
-Config::define(
-  'WOOCOMMERCE_API_AUTH_STRING',
-  base64_encode(env('WOOCOMMERCE_API_CONSUMER_KEY') . ':' . env('WOOCOMMERCE_API_CONSUMER_SECRET')),
-);

 // Stripe
 Config::define('STRIPE_API_SECRET', env('STRIPE_API_SECRET'));
--- a/config/environments/production.php
+++ b/config/environments/production.php
@ -6,11 +6,10 @@

 declare(strict_types=1);

-use Roots\WPConfig\Config;
-
-use function base64_encode;
 use function Env\env;

+use Roots\WPConfig\Config;
+
 Config::define('WP_DEBUG', true);
 Config::define('WP_DEBUG_DISPLAY', false);
 Config::define('WP_DEBUG_LOG', env('WP_DEBUG_LOG') ?? true);
@ -21,10 +20,6 @@ Config::define('DISALLOW_FILE_MODS', false);

 Config::define('WOOCOMMERCE_API_CONSUMER_KEY', env('WOOCOMMERCE_API_CONSUMER_KEY'));
 Config::define('WOOCOMMERCE_API_CONSUMER_SECRET', env('WOOCOMMERCE_API_CONSUMER_SECRET'));
-Config::define(
-  'WOOCOMMERCE_API_AUTH_STRING',
-  base64_encode(env('WOOCOMMERCE_API_CONSUMER_KEY') . ':' . env('WOOCOMMERCE_API_CONSUMER_SECRET')),
-);

 // Stripe
 Config::define('STRIPE_API_SECRET', env('STRIPE_API_SECRET'));
--- a/config/environments/staging.php
+++ b/config/environments/staging.php
@ -6,15 +6,10 @@

 declare(strict_types=1);

-use Roots\WPConfig\Config;
-
-use function base64_encode;
 use function Env\env;

+use Roots\WPConfig\Config;
+
 Config::define('DISALLOW_INDEXING', true);
 Config::define('WOOCOMMERCE_API_CONSUMER_KEY', env('WOOCOMMERCE_API_CONSUMER_KEY'));
 Config::define('WOOCOMMERCE_API_CONSUMER_SECRET', env('WOOCOMMERCE_API_CONSUMER_SECRET'));
-Config::define(
-  'WOOCOMMERCE_API_AUTH_STRING',
-  base64_encode(env('WOOCOMMERCE_API_CONSUMER_KEY') . ':' . env('WOOCOMMERCE_API_CONSUMER_SECRET')),
-);
--- a/containers/Dockerfile
+++ b/containers/Dockerfile
@ -14,10 +14,10 @@ FROM docker.io/library/wordpress:php8.5-fpm-alpine AS php
 ENTRYPOINT []

 LABEL org.opencontainers.image.title=wordpress-haiku-atelier \
-      org.opencontainers.image.description="WordPress pour Haiku Atelier" \
-      org.opencontainers.image.authors="gcch" \
-      org.opencontainers.image.vendor="gcch" \
-      org.opencontainers.image.licenses=AGPL-3.0
+  org.opencontainers.image.description="WordPress pour Haiku Atelier" \
+  org.opencontainers.image.authors="gcch" \
+  org.opencontainers.image.vendor="gcch" \
+  org.opencontainers.image.licenses=AGPL-3.0

 # Installe wp-cli.
 RUN curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar && chmod +x wp-cli.phar && mv wp-cli.phar /usr/local/bin/wp
@ -36,8 +36,7 @@ VOLUME /var/www/wordpress
 WORKDIR /var/www/wordpress

 # Récupère les fichiers du projet.
-COPY --from=repo --chmod=775 "/tmp/repo/" .
-RUN chown www-data: -R .
+COPY --from=repo --chmod=777 "/tmp/repo/" .

 # Installe les dépendences Composer.
 RUN composer install
--- a/containers/conf/angie/angie.conf
+++ b/containers/conf/angie/angie.conf
@ -7,7 +7,6 @@ include /etc/angie/modules-enabled/*.conf;
 pcre_jit on;
 pid /run/angie.pid;
 error_log /dev/stdout info;
-error_log /var/log/angie/angie.log warn;

 events {
    worker_connections 2048;
--- a/containers/conf/angie/angie.conf-original
+++ b/containers/conf/angie/angie.conf-original
@ -1,85 +1,117 @@
-user www-data;
-worker_processes auto;
-pid /run/angie.pid;
-include /etc/angie/modules-enabled/*.conf;
+
+#user  nobody;
+worker_processes  1;
+
+#error_log  logs/error.log;
+#error_log  logs/error.log  notice;
+#error_log  logs/error.log  info;
+
+#pid        logs/angie.pid;
+

 events {
-	worker_connections 768;
-	# multi_accept on;
+    worker_connections  1024;
 }

+
 http {
+    include       mime.types;
+    default_type  application/octet-stream;

-	##
-	# Basic Settings
-	##
+    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+    #                  '$status $body_bytes_sent "$http_referer" '
+    #                  '"$http_user_agent" "$http_x_forwarded_for"';

-	sendfile on;
-	tcp_nopush on;
-	tcp_nodelay on;
-	keepalive_timeout 65;
-	types_hash_max_size 2048;
-	# server_tokens off;
+    #access_log  logs/access.log  main;

-	# server_names_hash_bucket_size 64;
-	# server_name_in_redirect off;
+    sendfile        on;
+    #tcp_nopush     on;

-	include /etc/angie/mime.types;
-	default_type application/octet-stream;
+    #keepalive_timeout  0;
+    keepalive_timeout  65;

-	##
-	# SSL Settings
-	##
+    #gzip  on;

-	ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
-	ssl_prefer_server_ciphers on;
+    server {
+        listen       80;
+        server_name  localhost;

-	##
-	# Logging Settings
-	##
+        #charset koi8-r;

-	access_log /var/log/angie/access.log;
-	error_log /var/log/angie/error.log;
+        #access_log  logs/host.access.log  main;

-	##
-	# Gzip Settings
-	##
+        location / {
+            root   html;
+            index  index.html index.htm;
+        }

-	gzip on;
+        #error_page  404              /404.html;

-	# gzip_vary on;
-	# gzip_proxied any;
-	# gzip_comp_level 6;
-	# gzip_buffers 16 8k;
-	# gzip_http_version 1.1;
-	# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+        # redirect server error pages to the static page /50x.html
+        #
+        error_page   500 502 503 504  /50x.html;
+        location = /50x.html {
+            root   html;
+        }

-	##
-	# Virtual Host Configs
-	##
+        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
+        #
+        #location ~ \.php$ {
+        #    proxy_pass   http://127.0.0.1;
+        #}
+
+        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
+        #
+        #location ~ \.php$ {
+        #    root           html;
+        #    fastcgi_pass   127.0.0.1:9000;
+        #    fastcgi_index  index.php;
+        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
+        #    include        fastcgi_params;
+        #}
+
+        # deny access to .htaccess files, if Apache's document root
+        # concurs with Angie's one
+        #
+        #location ~ /\.ht {
+        #    deny  all;
+        #}
+    }
+
+
+    # another virtual host using mix of IP-, name-, and port-based configuration
+    #
+    #server {
+    #    listen       8000;
+    #    listen       somename:8080;
+    #    server_name  somename  alias  another.alias;
+
+    #    location / {
+    #        root   html;
+    #        index  index.html index.htm;
+    #    }
+    #}
+
+
+    # HTTPS server
+    #
+    #server {
+    #    listen       443 ssl;
+    #    server_name  localhost;
+
+    #    ssl_certificate      cert.pem;
+    #    ssl_certificate_key  cert.key;
+
+    #    ssl_session_cache    shared:SSL:1m;
+    #    ssl_session_timeout  5m;
+
+    #    ssl_ciphers  HIGH:!aNULL:!MD5;
+    #    ssl_prefer_server_ciphers  on;
+
+    #    location / {
+    #        root   html;
+    #        index  index.html index.htm;
+    #    }
+    #}

-	include /etc/angie/conf.d/*.conf;
-	include /etc/angie/sites-enabled/*;
 }
-
-
-#mail {
-#	# See sample authentication script at:
-#	# http://wiki.angie.org/ImapAuthenticateWithApachePhpScript
-# 
-#	# auth_http localhost/auth.php;
-#	# pop3_capabilities "TOP" "USER";
-#	# imap_capabilities "IMAP4rev1" "UIDPLUS";
-# 
-#	server {
-#		listen     localhost:110;
-#		protocol   pop3;
-#		proxy      on;
-#	}
-# 
-#	server {
-#		listen     localhost:143;
-#		protocol   imap;
-#		proxy      on;
-#	}
-#}
--- a/containers/conf/angie/angie.conf-packaged
+++ b/containers/conf/angie/angie.conf-packaged
@ -1,5 +1,5 @@
 ###
-## This file comes with the "NGINX Mainline and modules" on https://deb.paranoid.nl/nginx-modules
+## This file comes with the "Angie modules" on https://deb.paranoid.nl/angie-modules
 ## It contains various optimizations, examples and tweaks.
 ####

@ -11,8 +11,10 @@ worker_rlimit_nofile 10000;
 pid /run/angie.pid;
 include /etc/angie/modules-enabled/*.conf;

+pcre_jit on;
+
 events {
-    worker_connections 65535;
+    worker_connections 8192;  # this can go as high as ulimit -n
    multi_accept on;
    use epoll;
 }
@ -29,20 +31,23 @@ http {
    directio 256k;
    sendfile_max_chunk 256k;

-    tcp_nopush off;
+    tcp_nopush on;
    tcp_nodelay on;
-    types_hash_max_size 2048;
-    server_names_hash_bucket_size 128;
-    variables_hash_max_size 1024;
-    # server_name_in_redirect off;

    include /etc/angie/mime.types;
-    default_type application/octet-stream;
+    server_name_in_redirect off; # if off, angie will use the requested Host header
+    source_charset utf-8; # same value as "charset"
+

    ###
    ## Enable security_headers only if you installed/enabled the module
    ###
    #  security_headers on;
+
+
+    ###
+    ## Enable other security headers.
+    ###
    #  hide_server_tokens on;
    #  fastcgi_hide_header X-Powered-By;
    #  server_tokens off;
@ -50,15 +55,13 @@ http {
    ##
    # Optimizing TLS over TCP to reduce latency (Cloudflare patch)
    ##
-    #ssl_dyn_rec_enable on;
+    # ssl_dyn_rec_enable on;

    ##
    # Enable HTTP2 and HTTP3
    #
    http2 on;
    #http3 on;
-    #
-    ##

    ##
    # SSL Settings
@ -78,11 +81,11 @@ http {
    ssl_early_data on;

    ssl_session_cache shared:SSL:10m;
-    ssl_session_cache shared:le_nginx_SSL:10m; #letsencrypt only
    ssl_session_timeout 1440m;

    # OCSP Stapling
    # fetch OCSP records from URL in ssl_certificate and cache them
+    # Please enter your own nameservers for security
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 1.1.1.1 8.8.8.8 valid=300;
@ -100,51 +103,73 @@ http {
    ##
    # Gzip Settings
    ##
-
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
+    gzip_min_length 250;
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

+    ##
+    # Brotli settings  (Please load module first!)
+    ##
+    #brotli on;
+    #brotli_comp_level 4;
+    #brotli_buffers 32 8k;
+    #brotli_min_length 1000;
+    #brotli_static on;
+    #brotli_types image/svg+xml text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/x-icon;
+
+    ##
+    # ZSTD Settings (Please load module first!)
+    ##
+    #zstd on;
+    #zstd_min_length 256; # no less than 256 bytes
+    #zstd_comp_level 3; # set the level to #
+    #zstd_buffers 32 8k;
+    #zstd_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/ xml+rss text/javascript image/x-icon;
+
+
    ###
    ## Miscellaneous
    ###

-    keepalive_disable none; # allow all browsers to use keepalive connections
-    keepalive_requests 50; # number of requests per connection, does not affect SPDY
-    max_ranges 1; # allow a single range header for resumed downloads and to stop large range header DoS attacks
-    msie_padding off;
-    #open_file_cache max=10000 inactive=2h;
+    # cache informations about FDs, frequently accessed files
+    # can boost performance, but you need to test those values
+    #open_file_cache max=200000 inactive=20s;
+    #open_file_cache_valid 30s;
+    #open_file_cache_min_uses 2;
    #open_file_cache_errors on;
-    #open_file_cache_min_uses 1;
-    #open_file_cache_valid 1h;
-    output_buffers 2 512k;
-    #postpone_output 1440; # postpone sends to match our machine's MSS
-    read_ahead 512K; # kernel read head set to the output_buffers
-    server_name_in_redirect off; # if off, angie will use the requested Host header
-    source_charset utf-8; # same value as "charset"
+
+    server_names_hash_bucket_size 256;
+    server_names_hash_max_size 2048;
+    variables_hash_bucket_size 256;
+    variables_hash_max_size 2048;
+    map_hash_max_size 2048;
+    map_hash_bucket_size 256;
+
+    #postpone_output 1440;    # postpone sends to match our machine's MSS
+    read_ahead 512K;          # kernel read head set to the output_buffers
+    output_buffers 4 512k;   

    # Buffer size for POST submissions
-    client_body_buffer_size 10K;
+    client_body_buffer_size 80K;
    client_max_body_size 16m;

    # Buffer size for Headers
    client_header_buffer_size 1k;

-    # Allow the server to close the connection after a client stops
-    # responding.
-    # Frees up socket-associated memory.
-    #
-    reset_timedout_connection on;
-
    # Timeouts, do not keep connections open longer then necessary to reduce
    # resource usage and deny Slowloris type attacks.
-    client_body_timeout 10s; # maximum time between packets the client can pause when sending angie any data
-    client_header_timeout 10s; # maximum time the client has to send the entire header to angie
-    keepalive_timeout 120s; # timeout which a single keep-alive client connection will stay open
+    client_body_timeout 12;  # maximum time between packets the client can pause when sending angie any data
+    client_header_timeout 12;# maximum time the client has to send the entire header to ngin 
+    keepalive_timeout 15;    # timeout which a single keep-alive client connection will stay open
+    keepalive_disable none;  # allow all browsers to use keepalive connections
+    keepalive_requests 5000; # number of requests per connection, does not affect SPDY
+    reset_timedout_connection on; # Allow the server to close the connection after a client stops responding.
+    send_timeout 12;

    ##
    # Virtual Host Configs
--- a/containers/conf/angie/compression.conf
+++ b/containers/conf/angie/compression.conf
@ -7,7 +7,44 @@ gzip_proxied any;
 gzip_vary on;
 gzip_disable "msie6";
 gzip_static on;
-gzip_types application/atom+xml application/geo+json application/javascript application/json application/ld+json application/manifest+json application/rdf+xml application/rss+xml application/vnd.api+json application/vnd.geo+json application/vnd.ms-fontobject application/x-font-opentype application/x-font-truetype application/x-font-ttf application/x-javascript application/x-web-app-manifest+json application/xhtml+xml application/xml font/eot font/opentype font/otf font/ttf image/bmpg image/svg+xml image/vnd.microsoft.icon image/x-icon text/cache-manifest text/css text/html text/javascript text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy text/xml;
+gzip_types
+        application/atom+xml
+        application/geo+json
+        application/javascript
+        application/json
+        application/ld+json
+        application/manifest+json
+        application/rdf+xml
+        application/rss+xml
+        application/vnd.api+json
+        application/vnd.geo+json
+        application/vnd.ms-fontobject
+        application/x-font-opentype
+        application/x-font-truetype
+        application/x-font-ttf
+        application/x-javascript
+        application/x-web-app-manifest+json
+        application/xhtml+xml
+        application/xml
+        font/eot
+        font/opentype
+        font/otf
+        font/ttf
+        image/bmpg
+        image/svg+xml
+        image/vnd.microsoft.icon
+        image/x-icon
+        text/cache-manifest
+        text/css
+        text/html
+        text/javascript
+        text/plain
+        text/vcard
+        text/vnd.rim.location.xloc
+        text/vtt
+        text/x-component
+        text/x-cross-domain-policy
+        text/xml;

 brotli on;
 brotli_buffers 32 4K;
@ -25,4 +62,41 @@ zstd_buffers 32 4K;
 zstd_comp_level 3;
 zstd_min_length 1000;
 zstd_static on;
-zstd_types application/atom+xml application/geo+json application/javascript application/json application/ld+json application/manifest+json application/rdf+xml application/rss+xml application/vnd.api+json application/vnd.geo+json application/vnd.ms-fontobject application/x-font-opentype application/x-font-truetype application/x-font-ttf application/x-javascript application/x-web-app-manifest+json application/xhtml+xml application/xml font/eot font/opentype font/otf font/ttf image/bmpg image/svg+xml image/vnd.microsoft.icon image/x-icon text/cache-manifest text/css text/html text/javascript text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy text/xml;
+zstd_types
+        application/atom+xml
+        application/geo+json
+        application/javascript
+        application/json
+        application/ld+json
+        application/manifest+json
+        application/rdf+xml
+        application/rss+xml
+        application/vnd.api+json
+        application/vnd.geo+json
+        application/vnd.ms-fontobject
+        application/x-font-opentype
+        application/x-font-truetype
+        application/x-font-ttf
+        application/x-javascript
+        application/x-web-app-manifest+json
+        application/xhtml+xml
+        application/xml
+        font/eot
+        font/opentype
+        font/otf
+        font/ttf
+        image/bmpg
+        image/svg+xml
+        image/vnd.microsoft.icon
+        image/x-icon
+        text/cache-manifest
+        text/css
+        text/html
+        text/javascript
+        text/plain
+        text/vcard
+        text/vnd.rim.location.xloc
+        text/vtt
+        text/x-component
+        text/x-cross-domain-policy
+        text/xml;
--- a/containers/conf/angie/dhparam.pem
+++ b/containers/conf/angie/dhparam.pem
@ -1,13 +0,0 @@
-----BEGIN DH PARAMETERS-----
-MIICCAKCAgEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
-+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a
-87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7
-YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi
-7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD
-ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3
-7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32
-nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZp4e
-8W5vUsMWTfT7eTDp5OWIV7asfV9C1p9tGHdjzx1VA0AEh/VbpX4xzHpxNciG77Qx
-iu1qHgEtnmgyqQdgCpGBMMRtx3j5ca0AOAkpmaMzy4t6Gh25PXFAADwqTs6p+Y0K
-zAqCkc3OyX3Pjsm1Wn+IpGtNtahR9EGC4caKAH5eZV9q//////////8CAQI=
-----END DH PARAMETERS-----
--- a/containers/conf/angie/fastcgi.conf
+++ b/containers/conf/angie/fastcgi.conf
@ -17,5 +17,4 @@ fastcgi_param SERVER_PORT $server_port;
 fastcgi_param SERVER_PROTOCOL $server_protocol;
 fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;

-fastcgi_hide_header X-Powered-By;
 fastcgi_index index.php;
--- a/containers/conf/angie/haikuatelier.conf
+++ b/containers/conf/angie/haikuatelier.conf
@ -2,12 +2,15 @@ server {
    listen 80;
    server_name _;

-    root /var/www/wordpress/web/;
+    root /var/www/wordpress/web;
    index index.html index.php;

    access_log /var/log/angie/haikuatelier-access.log;
    error_log /var/log/angie/haikuatelier-error.log;

+    # Remove X-Powered-By, which is an information leak
+    fastcgi_hide_header X-Powered-By;
+
    # Pour éviter des erreurs liés à des requêtes trop lourdes.
    fastcgi_buffers 16 32k;
    fastcgi_buffer_size 64k;
@ -30,27 +33,25 @@ server {
        access_log off;
    }

+    location ~ \.php$ {
+        fastcgi_pass wordpress:9000;
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        include /etc/angie/fastcgi.conf;
+        try_files $uri =404;
+    }
+
+    location ~* .(jpg|jpeg|png|gif|ico|css|js)$ {
+        expires 365d;
+    }
+
    location / {
        try_files $uri $uri/ /index.php?$args;
    }

-    location ~ \.php$ {
-        include /etc/angie/fastcgi.conf;
-        fastcgi_pass wordpress:9000;
-        fastcgi_intercept_errors on;
-        fastcgi_split_path_info ^(.+\.php)(/.+)$;
-    }
-
-    location ~* \.(?:ico|svg|css|js|gif|jpe?g|png|avif|jxl|webp|avif|woff2?)$ {
-        access_log off;
-        expires max;
-        add_header "Cache-Control" "public, immutable";
-    }
-
    location * {
-        add_header "Access-Control-Allow-Methods" "GET, POST, OPTIONS";
-        add_header "Access-Control-Allow-Origin" "*";
-        add_header "Cross-Origin-Opener-Policy" "unsafe-none";
-        add_header "Cross-Origin-Resource-Policy" "cross-origin";
+      add_header "Access-Control-Allow-Methods" "GET, POST, OPTIONS";
+      add_header "Access-Control-Allow-Origin" "*";
+      add_header "Cross-Origin-Opener-Policy" "unsafe-none";
+      add_header "Cross-Origin-Resource-Policy" "cross-origin";
    }
 }
--- a/containers/conf/angie/naxsi_rules/blocking/10000000_scanner.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/10000000_scanner.rules
@ -1,96 +0,0 @@
-#######################################
-## Scanners ids: 10000000            ##
-#######################################
-
-# http://pastebin.com/NP64hTQr
-# http://blog.initiative-s.de/2013/09/kompromitierte-wordpress-blogs-werden-fuer-ddos-attacken-genutzt/
-# If using wp then turn off this rule
-MainRule id:10000000 "s:$UWA:8" "str:wordpress/" "mz:$HEADERS_VAR:User-Agent" "msg:Wordpress in user-agent";
-
-# https://github.com/robertdavidgraham/masscan
-MainRule id:10000001 "s:$UWA:8" "str:masscan" "mz:$HEADERS_VAR:User-Agent" "msg:masscan in user-agent";
-
-# block acunetix scan
-MainRule id:10000002 "s:$UWA:8" "str:99999999999999999999999" "mz:$HEADERS_VAR:Content-length" "msg:acunetix scan nginx buffer size";
-MainRule id:10000003 "s:$UWA:8" "str:acunetix" "mz:URL|BODY|$HEADERS_VAR:Accept|$HEADERS_VAR:User-Agent" "msg:acunetix scan website";
-MainRule id:10000004 "s:$UWA:8" "str:acunetix/wvs" "mz:$HEADERS_VAR:Accept" "msg:acunetix scan website";
-
-MainRule id:10000005 "s:$UWA:8" "str:havij" "mz:$HEADERS_VAR:User-Agent" "msg:Havij in user-agent";
-MainRule id:10000006 "s:$UWA:8" "str:webmole" "mz:$HEADERS_VAR:User-Agent" "msg:webmole in user-agent";
-MainRule id:10000007 "s:$UWA:8" "str:nlpproject.info" "mz:$HEADERS_VAR:User-Agent" "msg:nlpproject.info in user-agent";
-MainRule id:10000008 "s:$UWA:8" "str:cloudmapping" "mz:$HEADERS_VAR:User-Agent" "msg:cloudmapping in user-agent";
-MainRule id:10000009 "s:$UWA:8" "str:sucuri" "mz:$HEADERS_VAR:User-Agent" "msg:Sucuri in user-agent";
-MainRule id:10000010 "s:$UWA:8" "str:brutus/" "mz:$HEADERS_VAR:User-Agent" "msg:Brutus in user-agent";
-MainRule id:10000011 "s:$UWA:4" "str:apachebench" "mz:$HEADERS_VAR:User-Agent" "msg:apachebench in user-agent";
-MainRule id:10000012 "s:$UWA:8" "str:/netsparker" "mz:URL" "msg:netsparker in user-agent";
-MainRule id:10000013 "s:$UWA:8" "str:mysqloit" "mz:$HEADERS_VAR:User-Agent" "msg:Mysqloit in user-agent";
-MainRule id:10000014 "s:$UWA:8" "str:network-services-auditor" "mz:$HEADERS_VAR:User-Agent" "msg:network-services-auditor in user-agent";
-MainRule id:10000015 "s:$UWA:8" "str:dav.pm" "mz:$HEADERS_VAR:User-Agent" "msg:dav.pm in user-agent";
-MainRule id:10000016 "s:$UWA:8" "str:w3af" "mz:$HEADERS_VAR:User-Agent" "msg:w3af in user-agent";
-MainRule id:10000017 "s:$UWA:8" "str:http_get_vars" "mz:$HEADERS_VAR:User-Agent" "msg:PHP-Injetion on UA";
-MainRule id:10000018 "s:$UWA:8" "str:whisker" "mz:$HEADERS_VAR:User-Agent" "msg:whisker in user-agent";
-MainRule id:10000019 "s:$UWA:8" "str:whatweb" "mz:$HEADERS_VAR:User-Agent" "msg:whatweb in user-agent";
-MainRule id:10000020 "s:$UWA:8" "str:dirbuster" "mz:$HEADERS_VAR:User-Agent" "msg:DirBuster in user-agent";
-
-# https://www.bleepingcomputer.com/news/security/phps-git-server-hacked-to-add-backdoors-to-php-source-code/
-# https://github.com/php/php-src/commit/c730aa26bd52829a49f2ad284b181b7e82a68d7d#diff-a35f2ee9e1d2d3983a3270ee10ec70bf86349c53febdeabdf104f88cb2167961R370
-# prevent php supply chain attack
-MainRule id:10000021 "s:$UWA:8" "str:zerodium" "mz:$HEADERS_VAR:User-Agent" "msg:zerodium in user-agent";
-
-# prevent log4j attack
-# info https://www.govcert.ch/blog/zero-day-exploit-targeting-popular-java-library-log4j/
-# payload check https://github.com/johto89/Some-collections-for-Security-Researcher/blob/master/log4j-all-in-one.md
-MainRule id:10000022 "s:$UWA:8" "str:${" "mz:$HEADERS_VAR:User-Agent" "msg:log4j attack detection";
-
-# Python libraries like python-requests, python-urllib, etc..
-MainRule id:10000023 "s:$UWA:8" "str:python" "mz:$HEADERS_VAR:User-Agent" "msg:python in user-agent";
-
-# Meterpreter
-MainRule id:10000024 "s:$UWA:8" "str:meterpreter" "mz:$HEADERS_VAR:User-Agent" "msg:meterpreter in user-agent";
-
-# https://github.com/zmap/zgrab2
-MainRule id:10000025 "s:$UWA:8" "str:zgrab" "mz:$HEADERS_VAR:User-Agent" "msg:zgrab in user-agent";
-
-# Known tools like nmap,curl,wget
-MainRule id:10000026 "s:$UWA:8" "str:nmap" "mz:$HEADERS_VAR:User-Agent" "msg:nmap in user-agent";
-MainRule id:10000027 "s:$UWA:8" "str:curl" "mz:$HEADERS_VAR:User-Agent" "msg:curl in user-agent";
-MainRule id:10000028 "s:$UWA:8" "str:wget" "mz:$HEADERS_VAR:User-Agent" "msg:wget in user-agent";
-MainRule id:10000029 "s:$UWA:8" "str:sqlmap" "mz:$HEADERS_VAR:User-Agent" "msg:slqmap in user-agent";
-
-# Scan from Expense with this User-Agent:
-# Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers presences on the Internet.
-# If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com
-MainRule id:10000030 "s:$UWA:8" "str:paloaltonetworks.com" "mz:$HEADERS_VAR:User-Agent" "msg:paloaltonetworks in user-agent";
-MainRule id:10000031 "s:$UWA:8" "str:palo alto network" "mz:$HEADERS_VAR:User-Agent" "msg:palo alto network in user-agent";
-MainRule id:10000032 "s:$UWA:8" "str:Expense" "mz:$HEADERS_VAR:User-Agent" "msg:Expense in user-agent";
-
-# Scan from NetSystemsResearch with this User-Agent:
-# NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com
-MainRule id:10000033 "s:$UWA:8" "str:NetSystemsResearch" "mz:$HEADERS_VAR:User-Agent" "msg:NetSystemsResearch in user-agent";
-
-# Golang default User-Agent
-MainRule id:10000034 "s:$UWA:8" "str:Go-http" "mz:$HEADERS_VAR:User-Agent" "msg:Golang in user-agent";
-
-# Perl default User-Agent
-MainRule id:10000035 "s:$UWA:8" "str:libwww-perl" "mz:$HEADERS_VAR:User-Agent" "msg:libwww-perl in user-agent";
-
-# l9tcpid in User-Agent
-MainRule id:10000036 "s:$UWA:8" "str:l9tcpid" "mz:$HEADERS_VAR:User-Agent" "msg:l9tcpid in user-agent";
-
-# l9explore in User-Agent
-MainRule id:10000037 "s:$UWA:8" "str:l9explore" "mz:$HEADERS_VAR:User-Agent" "msg:l9explore in user-agent";
-
-# WPScan in User-Agent
-MainRule id:10000038 "s:$UWA:8" "str:wpscan" "mz:$HEADERS_VAR:User-Agent" "msg:WPScan in user-agent";
-
-# WinHttpReq in User-Agent
-MainRule id:10000039 "s:$UWA:8" "str:WinHttpReq" "mz:$HEADERS_VAR:User-Agent" "msg:WinHttpReq in user-agent";
-
-# EgyScan security scanner uses AliElTop in some of the attacks
-MainRule id:10000040 "s:$UWA:8" "str:AliElTop" "mz:ANY" "msg:EgyScan security scanner";
-
-# Guzzle PHP HTTP client
-MainRule id:10000041 "s:$UWA:8" "str:GuzzleHttp" "mz:$HEADERS_VAR:User-Agent" "msg:GuzzleHttp in user-agent";
-
-# Java client
-MainRule id:10000042 "s:$UWA:8" "str:AsyncHttpClient" "mz:$HEADERS_VAR:User-Agent" "msg:AsyncHttpClient in user-agent";
--- a/containers/conf/angie/naxsi_rules/blocking/20000000_web_security.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/20000000_web_security.rules
@ -1,172 +0,0 @@
-#######################################
-## Webserver Security ids: 20000000  ##
-#######################################
-
-# webserver critical files
-MainRule id:20000000 "s:$UWA:8" "str:.conf" "mz:URL" "msg:file access to .conf";
-MainRule id:20000001 "s:$UWA:8" "str:.ini" "mz:URL" "msg:file access to .ini";
-MainRule id:20000002 "s:$UWA:8" "str:.sql" "mz:URL" "msg:file access to .sql";
-MainRule id:20000003 "s:$UWA:8" "rx:\.txt$" "mz:URL" "msg:file access to .txt";
-MainRule id:20000004 "s:$UWA:8" "str:/sftp-config.json" "mz:URL|BODY" "msg:file access to sftp-config.json";
-MainRule id:20000005 "s:$UWA:8" "str:/.bzr" "mz:URL" "msg:bazaar version control folder access";
-MainRule id:20000006 "s:$UWA:8" "str:/.git" "mz:URL" "msg:git version control folder access";
-MainRule id:20000007 "s:$UWA:8" "str:/.hg" "mz:URL" "msg:mercurial version control folder access";
-MainRule id:20000008 "s:$UWA:8" "str:/.svn" "mz:URL" "msg:svn version control folder access";
-MainRule id:20000009 "s:$UWA:8" "str:/bzr/" "mz:URL" "msg:bazaar version control folder access";
-MainRule id:20000010 "s:$UWA:8" "str:/git/" "mz:URL" "msg:git version control folder access";
-MainRule id:20000011 "s:$UWA:8" "str:/hg/" "mz:URL" "msg:mercurial version control folder access";
-MainRule id:20000012 "s:$UWA:8" "str:/svn/" "mz:URL" "msg:svn version control folder access";
-MainRule id:20000013 "s:$UWA:8" "str:.htpasswd" "mz:ARGS|BODY|URL|FILE_EXT" "msg:file access to .htpasswd";
-MainRule id:20000014 "s:$UWA:8" "str:.htaccess" "mz:ARGS|BODY|URL|FILE_EXT" "msg:file access to .htaccess";
-MainRule id:20000015 "s:$UWA:8" "str:.ds_store" "mz:URL" "msg:file access to .ds_store";
-MainRule id:20000016 "s:$UWA:8" "str:changelog" "mz:URL" "msg:file access to changelog";
-MainRule id:20000017 "s:$UWA:8" "rx:^/core.\d+$" "mz:URL" "msg:file access to core dumps";
-MainRule id:20000018 "s:$UWA:8" "rx:\.module$" "mz:URL" "msg:file access to .module (drupal)";
-MainRule id:20000019 "s:$UWA:8" "str:web.config" "mz:URL" "msg:file access to web.config (drupal)";
-MainRule id:20000020 "s:$UWA:8" "rx:release[-_]notes\." "mz:URL" "msg:file access to release notes";
-MainRule id:20000021 "s:$UWA:8" "rx:~$" "mz:URL" "msg:file access to cache files";
-MainRule id:20000022 "s:$UWA:8" "str:web-inf" "mz:URL|BODY|ARGS" "msg:folder access to WEB-INF";
-
-# Exposed Services
-MainRule id:20000023 "s:$UWA:8" "str:/cgi-bin/luci" "mz:URL" "msg:Exposed OpenWRT";
-MainRule id:20000024 "s:$UWA:8" "rx:^/cgi-bin/.+\.cgi$" "mz:URL" "msg:Exposed cgi-bin";
-MainRule id:20000025 "s:$UWA:8" "str:/jenkins" "mz:URL" "msg:Exposed Jenkins";
-MainRule id:20000026 "s:$UWA:8" "str:/console/login/LoginForm.jsp" "mz:URL" "msg:Exposed Oracle WebLogic Server Administration Console";
-MainRule id:20000027 "s:$UWA:8" "str:/nuxeo/login.jsp" "mz:URL" "msg:Exposed Nuxeo Enterprise Platform";
-MainRule id:20000028 "s:$UWA:8" "str:/zabbix/index.php" "mz:URL" "msg:Exposed Zabbix";
-
-# Known hacking tools like burp suite, etc..
-MainRule id:20000029 "s:$UWA:8" "str:burpcollaborator.net" "mz:ARGS|BODY|HEADERS" "msg:burp collaborator";
-MainRule id:20000030 "s:$UWA:8" "str:/netsparker" "mz:URL" "msg:Netsparker";
-
-# Malicious strings in request
-MainRule id:20000031 "s:$UWA:8" "str:\n\r" "mz:URL" "msg:HTTP - Smuggling-Attempt (NewLine in URI)";
-MainRule id:20000032 "s:$UWA:6" "rx:^[a-zA-Z\d-]+\.[a-zA-Z]+$" "mz:$HEADERS_VAR:Host" "msg:HOST-Header Injection";
-MainRule id:20000033 "s:$UWA:8" "str:/bin/sh" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/bin/sh in URI";
-MainRule id:20000034 "s:$UWA:8" "str:/etc/passwd" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/etc/passwd in URI";
-MainRule id:20000035 "s:$UWA:8" "str:/etc/shadow" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/etc/shadow in URI";
-MainRule id:20000036 "s:$UWA:8" "str:/etc/hosts" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/etc/hosts in URI";
-MainRule id:20000037 "s:$UWA:8" "str:/Windows/system.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/Windows/system.ini in URI";
-MainRule id:20000038 "s:$UWA:8" "rx:<!DOCTYPE(\s+)(%*\s*)([{}:.a-zA-Z0-9_-]*)(\s+)SYSTEM" "mz:BODY" "msg: possible XML/XXE-Exploitation atempt (Doctype)";
-MainRule id:20000039 "s:$UWA:8" "str:http://http://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-MainRule id:20000040 "s:$UWA:8" "str:https://http://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-MainRule id:20000041 "s:$UWA:8" "str:http://https://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-MainRule id:20000042 "s:$UWA:8" "str:https://https://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-
-# ThinkPHP Remote Code Execution CVE-2018-20062
-MainRule id:20000043 "s:$UWA:8" "str:index/\think\app/invokefunction" "mz:URL" "msg:CVE-2018-20062";
-
-# AWS related files
-MainRule id:20000044 "s:$UWA:8" "str:/.aws/" "mz:URL" "msg:AWS Credential Stealer";
-
-# dot folders and files
-MainRule id:20000045 "s:$UWA:8" "rx:/\.[^.]" "mz:URL" "msg:Access to dot folder or file";
-
-# Exposed Microsoft Exchange
-MainRule id:20000046 "s:$UWA:8" "str:autodiscover/autodiscover.json" "mz:URL" "msg:Exposed Microsoft Exchange";
-MainRule id:20000047 "s:$UWA:8" "str:autodiscover/autodiscover.xml" "mz:URL" "msg:Exposed Microsoft Exchange";
-MainRule id:20000048 "s:$UWA:8" "str:/auth.owa" "mz:URL" "msg:Exposed Microsoft Exchange";
-
-# Ignition 2.5.1 Remote Code Execution CVE-2021-3129
-MainRule id:20000049 "s:$UWA:8" "str:/_ignition/execute-solution" "mz:URL" "msg:CVE-2021-3129";
-
-# CVE-2018-13379 path traversal vulnerability in Fortinet's FortiGate SSL VPN
-# https://x.x.x.x/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession
-MainRule id:20000050 "s:$UWA:8" "str:/sslvpn_websession" "mz:ARGS|BODY|HEADERS" "msg:CVE-2018-13379";
-
-# Exposed Apache Tomcat Administration Panel
-MainRule id:20000051 "s:$UWA:8" "str:/manager/html" "mz:URL" "msg:Exposed Apache Tomcat Administration Panel";
-
-# Block NMAP enumeration
-MainRule id:20000052 "s:$UWA:8" "str:/HNAP1" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000053 "s:$UWA:8" "rx:/default\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000054 "s:$UWA:8" "rx:/start\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000055 "s:$UWA:8" "rx:/localstart\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000056 "s:$UWA:8" "rx:/admin\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000057 "s:$UWA:8" "str:/nmaplowercheck" "mz:URL" "msg:NMAP enumeration attempt";
-
-# Siemens PLC scan
-MainRule id:20000058 "s:$UWA:8" "str:/__Additional" "mz:URL" "msg:Siemens PLC scan";
-MainRule id:20000059 "s:$UWA:8" "str:/docs/cplugError.html/" "mz:URL" "msg:Siemens PLC scan";
-MainRule id:20000060 "s:$UWA:8" "str:/Portal/Portal.mwsl" "mz:URL" "msg:Siemens PLC scan";
-
-# Block Citrix XenApp
-MainRule id:20000061 "s:$UWA:8" "str:/scripts/wpnbr.dll" "mz:URL" "msg:Citrix XenApp";
-
-# Block jenkins authentication bypass CVE-2018-1000861
-MainRule id:20000062 "s:$UWA:8" "str:/securityRealm/user/admin/search/index" "mz:URL" "msg:CVE-2018-1000861";
-
-# Block jenkins RCE CVE-2019-1003029, CVE-2019-1003030
-MainRule id:20000063 "s:$UWA:8" "str:/descriptorByName/org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript/checkScript/" "mz:URL" "msg:CVE-2019-1003029, CVE-2019-1003030";
-
-# Log4J bypass
-MainRule id:20000064 "s:$UWA:8" "str:${env:NaN:-" "mz:URL|ARGS|BODY|HEADERS" "msg:Attempted Log4J Bypass";
-
-# Windows system paths
-MainRule id:20000065 "s:$UWA:8" "str:\Windows\system.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:\Windows\system.ini in URI";
-MainRule id:20000066 "s:$UWA:8" "str:/Windows/win.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/Windows/win.ini in URI";
-MainRule id:20000067 "s:$UWA:8" "str:\Windows\win.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:\Windows\win.ini in URI";
-
-# Exposed Apache Host Manager App
-MainRule id:20000068 "s:$UWA:8" "str:/manager/text/list" "mz:URL" "msg:Exposed Apache Host Manager App";
-
-# Spring Cloud Gateway Code Injection Vulnerability
-MainRule id:20000069 "s:$UWA:8" "str:/actuator/gateway/routes" "mz:URL" "msg:CVE-2022-22947";
-
-# Block Spring4Shell
-MainRule id:20000070 "s:$UWA:8" "str:class.module.classLoader.resources." "mz:RAW_BODY" "msg:CVE-2022-22965";
-MainRule id:20000071 "s:$UWA:8" "rx:<%|%>" "mz:HEADERS" "msg:CVE-2022-22965";
-
-# Block Microsoft Exchange Server Remote Code Execution
-MainRule id:20000072 "s:$UWA:8" "str:/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application" "mz:URL" "msg:CVE-2021-28481";
-
-# Prevents IndoXploit/IDX Shell dump access
-# A website that has been infected will have a world-browsable folder called `idx_config`
-# which contains text versions of the configuration file of every CMS installation the shell
-# is able to find (impacts WordPress, Joomla and Magento).
-MainRule id:20000073 "s:$UWA:8" "str:/idx_config" "mz:URL" "msg:Prevent IndoXploit/IDX Shell dump access";
-
-# Prevents old grafana to return all folders
-# https://github.com/grafana/grafana/pull/44175
-MainRule id:20000074 "s:$UWA:8" "rx:^0$" "mz:$URL:/api/search|$ARGS_VAR:folderIds" "msg:Access all grafana folders";
-
-# Block access to yaml files
-MainRule id:20000075 "s:$UWA:8" "str:.yml" "mz:URL" "msg:file access to .yml";
-MainRule id:20000076 "s:$UWA:8" "str:.yaml" "mz:URL" "msg:file access to .yaml";
-
-# Block access to HashiCorp Consul/Vault template files
-MainRule id:20000077 "s:$UWA:8" "rx:\.ctmpl$" "mz:URL" "msg:file access to .ctmpl";
-MainRule id:20000078 "s:$UWA:8" "rx:\.hcl$" "mz:URL" "msg:file access to .hcl";
-
-# Block access to known files used for fingerprinting
-MainRule id:20000079 "s:$UWA:8" "rx:\.md$" "mz:URL" "msg:file access to .md";
-MainRule id:20000080 "s:$UWA:8" "rx:read[-_]?me" "mz:URL" "msg:file access to readme";
-MainRule id:20000081 "s:$UWA:8" "rx:\.toml$" "mz:URL" "msg:file access to .toml";
-
-# AWS related files
-MainRule id:20000082 "s:$UWA:8" "str:dockerrun.aws.json" "mz:URL" "msg:Exposed AWS Elastic Beanstalk configuration";
-
-# Block access to temporary backup files like .bak,.bak.php, etc...
-MainRule id:20000083 "s:$UWA:8" "str:.bak" "mz:URL" "msg:file access to temporary backup files";
-
-# Path traversal in nuxt/framework when in dev mode
-# https://huntr.dev/bounties/4849af83-450c-435e-bc0b-71705f5be440/
-MainRule id:20000084 "s:$UWA:8" "str:_nuxt/@" "mz:URL" "msg:path traversal in nuxt framework";
-
-# AWS NodeJS related files
-MainRule id:20000085 "s:$UWA:8" "str:awsconfig" "mz:URL" "msg:Exposed AWS config files";
-MainRule id:20000086 "s:$UWA:8" "str:aws-config" "mz:URL" "msg:Exposed AWS config files";
-MainRule id:20000087 "s:$UWA:8" "str:awscred" "mz:URL" "msg:Exposed AWS config files";
-MainRule id:20000088 "s:$UWA:8" "str:aws-cred" "mz:URL" "msg:Exposed AWS config files";
-
-# Text editors temp and config files
-MainRule id:20000089 "s:$UWA:8" "str:.old" "mz:URL" "msg:Exposed temp copy";
-MainRule id:20000090 "s:$UWA:8" "str:.save" "mz:URL" "msg:Exposed temp copy";
-MainRule id:20000091 "s:$UWA:8" "str:.DS_Store" "mz:URL" "msg:Exposed temp copy";
-MainRule id:20000092 "s:$UWA:8" "str:vscode" "mz:URL" "msg:Exposed vscode directory";
-
-# Exposed .env
-MainRule id:20000093 "s:$UWA:8" "str:/.env" "mz:URL" "msg:access to .env file or dir";
-
-# androxgh0st exploit
-MainRule id:20000094 "s:$UWA:8" "str:androxgh0st" "mz:ANY" "msg:androxgh0st exploit";
--- a/containers/conf/angie/naxsi_rules/blocking/30000000_wordpress.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/30000000_wordpress.rules
@ -1,16 +0,0 @@
-#######################################
-## Wordpress ids: 30000000           ##
-#######################################
-
-MainRule id:30000000 "s:$UWA:8" "str:system.multicall" "mz:$URL:/xmlrpc.php|BODY" "msg:Wordpress XMLRPC possible Password Brute Force";
-MainRule id:30000001 "s:$UWA:8" "str:system.listmethods" "mz:$URL:/xmlrpc.php|BODY" "msg:WordPress XMLRPC Enumeration system.listMethods";
-MainRule id:30000002 "s:$UWA:8" "str:system.getcapabilities" "mz:$URL:/xmlrpc.php|BODY" "msg:WordPress XMLRPC Enumeration system.getCapabilities";
-MainRule id:30000003 "s:$UWA:8" "str:/w3tc/dbcache" "mz:URL" "msg:WordPress TotalCache-DBCache-Access";
-MainRule id:30000004 "s:$UWA:8" "str:/uploadify/uploadify.php" "mz:URL" "msg:WordPress Uploadify-Access";
-MainRule id:30000005 "s:$UWA:8" "str:/wp-content/plugins/mm-forms-community/upload/temp/" "mz:URL" "msg:Access To mm-forms-community upload dir";
-MainRule id:30000006 "s:$UWA:8" "str:wp-config.php" "mz:BODY|ARGS|URL" "msg:WordPress access to wp-config.php";
-
-# block malicious access ALFA_DATA|alfacgiapi|cgialfa path
-MainRule id:30000007 "s:$UWA:8" "str:ALFA_DATA" "mz:URL" "msg:WordPress malicious access to ALFA_DATA path";
-MainRule id:30000008 "s:$UWA:8" "str:alfacgiapi" "mz:URL" "msg:WordPress malicious access to alfacgiapi path";
-MainRule id:30000009 "s:$UWA:8" "str:cgialfa" "mz:URL" "msg:WordPress malicious access to cgialfa path";
--- a/containers/conf/angie/naxsi_rules/blocking/40000000_php_security.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/40000000_php_security.rules
@ -1,66 +0,0 @@
-#######################################
-## PHP Security ids: 40000000        ##
-#######################################
-
-# Php Functions
-MainRule id:40000000 "s:$UWA:8" "str:gzinflate(" "mz:URL|BODY|ARGS" "msg:gzinflate in URI";
-MainRule id:40000001 "s:$UWA:8" "str:system(" "mz:URL|BODY|ARGS" "msg:php system called";
-MainRule id:40000002 "s:$UWA:8" "str:base64_decode(" "mz:URL|BODY|ARGS" "msg:php base64_decode called";
-MainRule id:40000003 "s:$UWA:8" "str:@eval" "mz:URL|BODY|ARGS" "msg:php eval called";
-MainRule id:40000004 "s:$UWA:8" "rx:eval\((\s+)?\$_" "mz:URL|BODY|ARGS" "msg:php eval called";
-
-# PhpMyAdmin
-MainRule id:40000005 "s:$UWA:8" "str:/db-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000006 "s:$UWA:8" "str:/dbadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000007 "s:$UWA:8" "str:/myadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000008 "s:$UWA:8" "str:/mysqldumper " "mz:URL" "msg:MysqlDumper";
-MainRule id:40000009 "s:$UWA:8" "str:/mysqlmanager" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000010 "s:$UWA:8" "str:/p/m/a/" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000011 "s:$UWA:8" "str:/php-my-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000012 "s:$UWA:8" "str:/php-myadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000013 "s:$UWA:8" "str:/phpmanager" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000014 "s:$UWA:8" "str:/phpmy" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000015 "s:$UWA:8" "str:/phpmy-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000016 "s:$UWA:8" "str:/phpmyadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000017 "s:$UWA:8" "str:/phppgadmin " "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000018 "s:$UWA:8" "str:/pma" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000019 "s:$UWA:8" "str:/sql-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000020 "s:$UWA:8" "str:/sqladmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000021 "s:$UWA:8" "str:/sqlweb" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000022 "s:$UWA:8" "str:/sysadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000023 "s:$UWA:8" "str:/webadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000024 "s:$UWA:8" "str:/webdb" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000025 "s:$UWA:8" "str:/websql" "mz:URL" "msg:SQL Admin Interface";
-
-# Block PHPUnit eval-stdin.php CVE-2017-9841
-MainRule id:40000026 "s:$UWA:8" "str:eval-stdin.php" "mz:URL" "msg:CVE-2017-9841";
-
-# Block PHP easter egg which normally can be disabled via expose_php = off
-MainRule id:40000027 "s:$UWA:8" "rx:PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$" "mz:URL|BODY|ARGS" "msg:PHP easter egg credits";
-
-# Block PHP Xdebug
-MainRule id:40000028 "s:$UWA:8" "str:XDEBUG_SESSION" "mz:ANY" "msg:Block PHP Xdebug";
-
-# Block PHPinfo access
-MainRule id:40000029 "s:$UWA:8" "str:phpinfo" "mz:URL|BODY|ARGS" "msg:PHPinfo access";
-
-# Block known php installer exploit
-MainRule id:40000030 "s:$UWA:8" "str:install.php" "mz:URL" "msg:Access to php install";
-
-# Block more sql admin interface
-MainRule id:40000031 "s:$UWA:8" "str:/mysql-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000032 "s:$UWA:8" "str:/mysqladmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000033 "s:$UWA:8" "str:/sqlmanager" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000034 "s:$UWA:8" "str:/mysql/" "mz:URL" "msg:SQL Admin Interface";
-
-# Block access to Lavarel telescope since it allows to read logs and SQL queries
-MainRule id:40000035 "s:$UWA:8" "str:/telescope/" "mz:URL" "msg:Access to Lavarel telescope";
-
-# Block access to adminer/phpMinAdmin sql admin interface
-MainRule id:40000036 "s:$UWA:8" "str:adminer" "mz:URL" "msg:SQL Admin Interface";
-
-# Block access to Symfony Web Framework dev mode.
-MainRule id:40000037 "s:$UWA:8" "str:app_dev" "mz:URL" "msg:Symfony Web Framework dev mode";
-
-# phpstorm in request
-MainRule id:40000038 "s:$UWA:8" "str:phpstorm" "mz:URL|ARGS|HEADERS" "msg:phpstorm in request";
--- a/containers/conf/angie/naxsi_rules/blocking/blocking/10000000_scanner.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/blocking/10000000_scanner.rules
@ -1,96 +0,0 @@
-#######################################
-## Scanners ids: 10000000            ##
-#######################################
-
-# http://pastebin.com/NP64hTQr
-# http://blog.initiative-s.de/2013/09/kompromitierte-wordpress-blogs-werden-fuer-ddos-attacken-genutzt/
-# If using wp then turn off this rule
-MainRule id:10000000 "s:$UWA:8" "str:wordpress/" "mz:$HEADERS_VAR:User-Agent" "msg:Wordpress in user-agent";
-
-# https://github.com/robertdavidgraham/masscan
-MainRule id:10000001 "s:$UWA:8" "str:masscan" "mz:$HEADERS_VAR:User-Agent" "msg:masscan in user-agent";
-
-# block acunetix scan
-MainRule id:10000002 "s:$UWA:8" "str:99999999999999999999999" "mz:$HEADERS_VAR:Content-length" "msg:acunetix scan nginx buffer size";
-MainRule id:10000003 "s:$UWA:8" "str:acunetix" "mz:URL|BODY|$HEADERS_VAR:Accept|$HEADERS_VAR:User-Agent" "msg:acunetix scan website";
-MainRule id:10000004 "s:$UWA:8" "str:acunetix/wvs" "mz:$HEADERS_VAR:Accept" "msg:acunetix scan website";
-
-MainRule id:10000005 "s:$UWA:8" "str:havij" "mz:$HEADERS_VAR:User-Agent" "msg:Havij in user-agent";
-MainRule id:10000006 "s:$UWA:8" "str:webmole" "mz:$HEADERS_VAR:User-Agent" "msg:webmole in user-agent";
-MainRule id:10000007 "s:$UWA:8" "str:nlpproject.info" "mz:$HEADERS_VAR:User-Agent" "msg:nlpproject.info in user-agent";
-MainRule id:10000008 "s:$UWA:8" "str:cloudmapping" "mz:$HEADERS_VAR:User-Agent" "msg:cloudmapping in user-agent";
-MainRule id:10000009 "s:$UWA:8" "str:sucuri" "mz:$HEADERS_VAR:User-Agent" "msg:Sucuri in user-agent";
-MainRule id:10000010 "s:$UWA:8" "str:brutus/" "mz:$HEADERS_VAR:User-Agent" "msg:Brutus in user-agent";
-MainRule id:10000011 "s:$UWA:4" "str:apachebench" "mz:$HEADERS_VAR:User-Agent" "msg:apachebench in user-agent";
-MainRule id:10000012 "s:$UWA:8" "str:/netsparker" "mz:URL" "msg:netsparker in user-agent";
-MainRule id:10000013 "s:$UWA:8" "str:mysqloit" "mz:$HEADERS_VAR:User-Agent" "msg:Mysqloit in user-agent";
-MainRule id:10000014 "s:$UWA:8" "str:network-services-auditor" "mz:$HEADERS_VAR:User-Agent" "msg:network-services-auditor in user-agent";
-MainRule id:10000015 "s:$UWA:8" "str:dav.pm" "mz:$HEADERS_VAR:User-Agent" "msg:dav.pm in user-agent";
-MainRule id:10000016 "s:$UWA:8" "str:w3af" "mz:$HEADERS_VAR:User-Agent" "msg:w3af in user-agent";
-MainRule id:10000017 "s:$UWA:8" "str:http_get_vars" "mz:$HEADERS_VAR:User-Agent" "msg:PHP-Injetion on UA";
-MainRule id:10000018 "s:$UWA:8" "str:whisker" "mz:$HEADERS_VAR:User-Agent" "msg:whisker in user-agent";
-MainRule id:10000019 "s:$UWA:8" "str:whatweb" "mz:$HEADERS_VAR:User-Agent" "msg:whatweb in user-agent";
-MainRule id:10000020 "s:$UWA:8" "str:dirbuster" "mz:$HEADERS_VAR:User-Agent" "msg:DirBuster in user-agent";
-
-# https://www.bleepingcomputer.com/news/security/phps-git-server-hacked-to-add-backdoors-to-php-source-code/
-# https://github.com/php/php-src/commit/c730aa26bd52829a49f2ad284b181b7e82a68d7d#diff-a35f2ee9e1d2d3983a3270ee10ec70bf86349c53febdeabdf104f88cb2167961R370
-# prevent php supply chain attack
-MainRule id:10000021 "s:$UWA:8" "str:zerodium" "mz:$HEADERS_VAR:User-Agent" "msg:zerodium in user-agent";
-
-# prevent log4j attack
-# info https://www.govcert.ch/blog/zero-day-exploit-targeting-popular-java-library-log4j/
-# payload check https://github.com/johto89/Some-collections-for-Security-Researcher/blob/master/log4j-all-in-one.md
-MainRule id:10000022 "s:$UWA:8" "str:${" "mz:$HEADERS_VAR:User-Agent" "msg:log4j attack detection";
-
-# Python libraries like python-requests, python-urllib, etc..
-MainRule id:10000023 "s:$UWA:8" "str:python" "mz:$HEADERS_VAR:User-Agent" "msg:python in user-agent";
-
-# Meterpreter
-MainRule id:10000024 "s:$UWA:8" "str:meterpreter" "mz:$HEADERS_VAR:User-Agent" "msg:meterpreter in user-agent";
-
-# https://github.com/zmap/zgrab2
-MainRule id:10000025 "s:$UWA:8" "str:zgrab" "mz:$HEADERS_VAR:User-Agent" "msg:zgrab in user-agent";
-
-# Known tools like nmap,curl,wget
-MainRule id:10000026 "s:$UWA:8" "str:nmap" "mz:$HEADERS_VAR:User-Agent" "msg:nmap in user-agent";
-MainRule id:10000027 "s:$UWA:8" "str:curl" "mz:$HEADERS_VAR:User-Agent" "msg:curl in user-agent";
-MainRule id:10000028 "s:$UWA:8" "str:wget" "mz:$HEADERS_VAR:User-Agent" "msg:wget in user-agent";
-MainRule id:10000029 "s:$UWA:8" "str:sqlmap" "mz:$HEADERS_VAR:User-Agent" "msg:slqmap in user-agent";
-
-# Scan from Expense with this User-Agent:
-# Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers presences on the Internet.
-# If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com
-MainRule id:10000030 "s:$UWA:8" "str:paloaltonetworks.com" "mz:$HEADERS_VAR:User-Agent" "msg:paloaltonetworks in user-agent";
-MainRule id:10000031 "s:$UWA:8" "str:palo alto network" "mz:$HEADERS_VAR:User-Agent" "msg:palo alto network in user-agent";
-MainRule id:10000032 "s:$UWA:8" "str:Expense" "mz:$HEADERS_VAR:User-Agent" "msg:Expense in user-agent";
-
-# Scan from NetSystemsResearch with this User-Agent:
-# NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com
-MainRule id:10000033 "s:$UWA:8" "str:NetSystemsResearch" "mz:$HEADERS_VAR:User-Agent" "msg:NetSystemsResearch in user-agent";
-
-# Golang default User-Agent
-MainRule id:10000034 "s:$UWA:8" "str:Go-http" "mz:$HEADERS_VAR:User-Agent" "msg:Golang in user-agent";
-
-# Perl default User-Agent
-MainRule id:10000035 "s:$UWA:8" "str:libwww-perl" "mz:$HEADERS_VAR:User-Agent" "msg:libwww-perl in user-agent";
-
-# l9tcpid in User-Agent
-MainRule id:10000036 "s:$UWA:8" "str:l9tcpid" "mz:$HEADERS_VAR:User-Agent" "msg:l9tcpid in user-agent";
-
-# l9explore in User-Agent
-MainRule id:10000037 "s:$UWA:8" "str:l9explore" "mz:$HEADERS_VAR:User-Agent" "msg:l9explore in user-agent";
-
-# WPScan in User-Agent
-MainRule id:10000038 "s:$UWA:8" "str:wpscan" "mz:$HEADERS_VAR:User-Agent" "msg:WPScan in user-agent";
-
-# WinHttpReq in User-Agent
-MainRule id:10000039 "s:$UWA:8" "str:WinHttpReq" "mz:$HEADERS_VAR:User-Agent" "msg:WinHttpReq in user-agent";
-
-# EgyScan security scanner uses AliElTop in some of the attacks
-MainRule id:10000040 "s:$UWA:8" "str:AliElTop" "mz:ANY" "msg:EgyScan security scanner";
-
-# Guzzle PHP HTTP client
-MainRule id:10000041 "s:$UWA:8" "str:GuzzleHttp" "mz:$HEADERS_VAR:User-Agent" "msg:GuzzleHttp in user-agent";
-
-# Java client
-MainRule id:10000042 "s:$UWA:8" "str:AsyncHttpClient" "mz:$HEADERS_VAR:User-Agent" "msg:AsyncHttpClient in user-agent";
--- a/containers/conf/angie/naxsi_rules/blocking/blocking/20000000_web_security.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/blocking/20000000_web_security.rules
@ -1,172 +0,0 @@
-#######################################
-## Webserver Security ids: 20000000  ##
-#######################################
-
-# webserver critical files
-MainRule id:20000000 "s:$UWA:8" "str:.conf" "mz:URL" "msg:file access to .conf";
-MainRule id:20000001 "s:$UWA:8" "str:.ini" "mz:URL" "msg:file access to .ini";
-MainRule id:20000002 "s:$UWA:8" "str:.sql" "mz:URL" "msg:file access to .sql";
-MainRule id:20000003 "s:$UWA:8" "rx:\.txt$" "mz:URL" "msg:file access to .txt";
-MainRule id:20000004 "s:$UWA:8" "str:/sftp-config.json" "mz:URL|BODY" "msg:file access to sftp-config.json";
-MainRule id:20000005 "s:$UWA:8" "str:/.bzr" "mz:URL" "msg:bazaar version control folder access";
-MainRule id:20000006 "s:$UWA:8" "str:/.git" "mz:URL" "msg:git version control folder access";
-MainRule id:20000007 "s:$UWA:8" "str:/.hg" "mz:URL" "msg:mercurial version control folder access";
-MainRule id:20000008 "s:$UWA:8" "str:/.svn" "mz:URL" "msg:svn version control folder access";
-MainRule id:20000009 "s:$UWA:8" "str:/bzr/" "mz:URL" "msg:bazaar version control folder access";
-MainRule id:20000010 "s:$UWA:8" "str:/git/" "mz:URL" "msg:git version control folder access";
-MainRule id:20000011 "s:$UWA:8" "str:/hg/" "mz:URL" "msg:mercurial version control folder access";
-MainRule id:20000012 "s:$UWA:8" "str:/svn/" "mz:URL" "msg:svn version control folder access";
-MainRule id:20000013 "s:$UWA:8" "str:.htpasswd" "mz:ARGS|BODY|URL|FILE_EXT" "msg:file access to .htpasswd";
-MainRule id:20000014 "s:$UWA:8" "str:.htaccess" "mz:ARGS|BODY|URL|FILE_EXT" "msg:file access to .htaccess";
-MainRule id:20000015 "s:$UWA:8" "str:.ds_store" "mz:URL" "msg:file access to .ds_store";
-MainRule id:20000016 "s:$UWA:8" "str:changelog" "mz:URL" "msg:file access to changelog";
-MainRule id:20000017 "s:$UWA:8" "rx:^/core.\d+$" "mz:URL" "msg:file access to core dumps";
-MainRule id:20000018 "s:$UWA:8" "rx:\.module$" "mz:URL" "msg:file access to .module (drupal)";
-MainRule id:20000019 "s:$UWA:8" "str:web.config" "mz:URL" "msg:file access to web.config (drupal)";
-MainRule id:20000020 "s:$UWA:8" "rx:release[-_]notes\." "mz:URL" "msg:file access to release notes";
-MainRule id:20000021 "s:$UWA:8" "rx:~$" "mz:URL" "msg:file access to cache files";
-MainRule id:20000022 "s:$UWA:8" "str:web-inf" "mz:URL|BODY|ARGS" "msg:folder access to WEB-INF";
-
-# Exposed Services
-MainRule id:20000023 "s:$UWA:8" "str:/cgi-bin/luci" "mz:URL" "msg:Exposed OpenWRT";
-MainRule id:20000024 "s:$UWA:8" "rx:^/cgi-bin/.+\.cgi$" "mz:URL" "msg:Exposed cgi-bin";
-MainRule id:20000025 "s:$UWA:8" "str:/jenkins" "mz:URL" "msg:Exposed Jenkins";
-MainRule id:20000026 "s:$UWA:8" "str:/console/login/LoginForm.jsp" "mz:URL" "msg:Exposed Oracle WebLogic Server Administration Console";
-MainRule id:20000027 "s:$UWA:8" "str:/nuxeo/login.jsp" "mz:URL" "msg:Exposed Nuxeo Enterprise Platform";
-MainRule id:20000028 "s:$UWA:8" "str:/zabbix/index.php" "mz:URL" "msg:Exposed Zabbix";
-
-# Known hacking tools like burp suite, etc..
-MainRule id:20000029 "s:$UWA:8" "str:burpcollaborator.net" "mz:ARGS|BODY|HEADERS" "msg:burp collaborator";
-MainRule id:20000030 "s:$UWA:8" "str:/netsparker" "mz:URL" "msg:Netsparker";
-
-# Malicious strings in request
-MainRule id:20000031 "s:$UWA:8" "str:\n\r" "mz:URL" "msg:HTTP - Smuggling-Attempt (NewLine in URI)";
-MainRule id:20000032 "s:$UWA:6" "rx:^[a-zA-Z\d-]+\.[a-zA-Z]+$" "mz:$HEADERS_VAR:Host" "msg:HOST-Header Injection";
-MainRule id:20000033 "s:$UWA:8" "str:/bin/sh" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/bin/sh in URI";
-MainRule id:20000034 "s:$UWA:8" "str:/etc/passwd" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/etc/passwd in URI";
-MainRule id:20000035 "s:$UWA:8" "str:/etc/shadow" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/etc/shadow in URI";
-MainRule id:20000036 "s:$UWA:8" "str:/etc/hosts" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/etc/hosts in URI";
-MainRule id:20000037 "s:$UWA:8" "str:/Windows/system.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/Windows/system.ini in URI";
-MainRule id:20000038 "s:$UWA:8" "rx:<!DOCTYPE(\s+)(%*\s*)([{}:.a-zA-Z0-9_-]*)(\s+)SYSTEM" "mz:BODY" "msg: possible XML/XXE-Exploitation atempt (Doctype)";
-MainRule id:20000039 "s:$UWA:8" "str:http://http://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-MainRule id:20000040 "s:$UWA:8" "str:https://http://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-MainRule id:20000041 "s:$UWA:8" "str:http://https://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-MainRule id:20000042 "s:$UWA:8" "str:https://https://" "mz:HEADERS" "msg:Abnormal double http:// in HTTP header";
-
-# ThinkPHP Remote Code Execution CVE-2018-20062
-MainRule id:20000043 "s:$UWA:8" "str:index/\think\app/invokefunction" "mz:URL" "msg:CVE-2018-20062";
-
-# AWS related files
-MainRule id:20000044 "s:$UWA:8" "str:/.aws/" "mz:URL" "msg:AWS Credential Stealer";
-
-# dot folders and files
-MainRule id:20000045 "s:$UWA:8" "rx:/\.[^.]" "mz:URL" "msg:Access to dot folder or file";
-
-# Exposed Microsoft Exchange
-MainRule id:20000046 "s:$UWA:8" "str:autodiscover/autodiscover.json" "mz:URL" "msg:Exposed Microsoft Exchange";
-MainRule id:20000047 "s:$UWA:8" "str:autodiscover/autodiscover.xml" "mz:URL" "msg:Exposed Microsoft Exchange";
-MainRule id:20000048 "s:$UWA:8" "str:/auth.owa" "mz:URL" "msg:Exposed Microsoft Exchange";
-
-# Ignition 2.5.1 Remote Code Execution CVE-2021-3129
-MainRule id:20000049 "s:$UWA:8" "str:/_ignition/execute-solution" "mz:URL" "msg:CVE-2021-3129";
-
-# CVE-2018-13379 path traversal vulnerability in Fortinet's FortiGate SSL VPN
-# https://x.x.x.x/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession
-MainRule id:20000050 "s:$UWA:8" "str:/sslvpn_websession" "mz:ARGS|BODY|HEADERS" "msg:CVE-2018-13379";
-
-# Exposed Apache Tomcat Administration Panel
-MainRule id:20000051 "s:$UWA:8" "str:/manager/html" "mz:URL" "msg:Exposed Apache Tomcat Administration Panel";
-
-# Block NMAP enumeration
-MainRule id:20000052 "s:$UWA:8" "str:/HNAP1" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000053 "s:$UWA:8" "rx:/default\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000054 "s:$UWA:8" "rx:/start\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000055 "s:$UWA:8" "rx:/localstart\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000056 "s:$UWA:8" "rx:/admin\.(asp|aspx|cfm|cgi|jsa|jsp|php|pl)$" "mz:URL" "msg:NMAP enumeration attempt";
-MainRule id:20000057 "s:$UWA:8" "str:/nmaplowercheck" "mz:URL" "msg:NMAP enumeration attempt";
-
-# Siemens PLC scan
-MainRule id:20000058 "s:$UWA:8" "str:/__Additional" "mz:URL" "msg:Siemens PLC scan";
-MainRule id:20000059 "s:$UWA:8" "str:/docs/cplugError.html/" "mz:URL" "msg:Siemens PLC scan";
-MainRule id:20000060 "s:$UWA:8" "str:/Portal/Portal.mwsl" "mz:URL" "msg:Siemens PLC scan";
-
-# Block Citrix XenApp
-MainRule id:20000061 "s:$UWA:8" "str:/scripts/wpnbr.dll" "mz:URL" "msg:Citrix XenApp";
-
-# Block jenkins authentication bypass CVE-2018-1000861
-MainRule id:20000062 "s:$UWA:8" "str:/securityRealm/user/admin/search/index" "mz:URL" "msg:CVE-2018-1000861";
-
-# Block jenkins RCE CVE-2019-1003029, CVE-2019-1003030
-MainRule id:20000063 "s:$UWA:8" "str:/descriptorByName/org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript/checkScript/" "mz:URL" "msg:CVE-2019-1003029, CVE-2019-1003030";
-
-# Log4J bypass
-MainRule id:20000064 "s:$UWA:8" "str:${env:NaN:-" "mz:URL|ARGS|BODY|HEADERS" "msg:Attempted Log4J Bypass";
-
-# Windows system paths
-MainRule id:20000065 "s:$UWA:8" "str:\Windows\system.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:\Windows\system.ini in URI";
-MainRule id:20000066 "s:$UWA:8" "str:/Windows/win.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:/Windows/win.ini in URI";
-MainRule id:20000067 "s:$UWA:8" "str:\Windows\win.ini" "mz:URL|BODY|ARGS|$HEADERS_VAR:User-Agent|$HEADERS_VAR:Cookie" "msg:\Windows\win.ini in URI";
-
-# Exposed Apache Host Manager App
-MainRule id:20000068 "s:$UWA:8" "str:/manager/text/list" "mz:URL" "msg:Exposed Apache Host Manager App";
-
-# Spring Cloud Gateway Code Injection Vulnerability
-MainRule id:20000069 "s:$UWA:8" "str:/actuator/gateway/routes" "mz:URL" "msg:CVE-2022-22947";
-
-# Block Spring4Shell
-MainRule id:20000070 "s:$UWA:8" "str:class.module.classLoader.resources." "mz:RAW_BODY" "msg:CVE-2022-22965";
-MainRule id:20000071 "s:$UWA:8" "rx:<%|%>" "mz:HEADERS" "msg:CVE-2022-22965";
-
-# Block Microsoft Exchange Server Remote Code Execution
-MainRule id:20000072 "s:$UWA:8" "str:/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application" "mz:URL" "msg:CVE-2021-28481";
-
-# Prevents IndoXploit/IDX Shell dump access
-# A website that has been infected will have a world-browsable folder called `idx_config`
-# which contains text versions of the configuration file of every CMS installation the shell
-# is able to find (impacts WordPress, Joomla and Magento).
-MainRule id:20000073 "s:$UWA:8" "str:/idx_config" "mz:URL" "msg:Prevent IndoXploit/IDX Shell dump access";
-
-# Prevents old grafana to return all folders
-# https://github.com/grafana/grafana/pull/44175
-MainRule id:20000074 "s:$UWA:8" "rx:^0$" "mz:$URL:/api/search|$ARGS_VAR:folderIds" "msg:Access all grafana folders";
-
-# Block access to yaml files
-MainRule id:20000075 "s:$UWA:8" "str:.yml" "mz:URL" "msg:file access to .yml";
-MainRule id:20000076 "s:$UWA:8" "str:.yaml" "mz:URL" "msg:file access to .yaml";
-
-# Block access to HashiCorp Consul/Vault template files
-MainRule id:20000077 "s:$UWA:8" "rx:\.ctmpl$" "mz:URL" "msg:file access to .ctmpl";
-MainRule id:20000078 "s:$UWA:8" "rx:\.hcl$" "mz:URL" "msg:file access to .hcl";
-
-# Block access to known files used for fingerprinting
-MainRule id:20000079 "s:$UWA:8" "rx:\.md$" "mz:URL" "msg:file access to .md";
-MainRule id:20000080 "s:$UWA:8" "rx:read[-_]?me" "mz:URL" "msg:file access to readme";
-MainRule id:20000081 "s:$UWA:8" "rx:\.toml$" "mz:URL" "msg:file access to .toml";
-
-# AWS related files
-MainRule id:20000082 "s:$UWA:8" "str:dockerrun.aws.json" "mz:URL" "msg:Exposed AWS Elastic Beanstalk configuration";
-
-# Block access to temporary backup files like .bak,.bak.php, etc...
-MainRule id:20000083 "s:$UWA:8" "str:.bak" "mz:URL" "msg:file access to temporary backup files";
-
-# Path traversal in nuxt/framework when in dev mode
-# https://huntr.dev/bounties/4849af83-450c-435e-bc0b-71705f5be440/
-MainRule id:20000084 "s:$UWA:8" "str:_nuxt/@" "mz:URL" "msg:path traversal in nuxt framework";
-
-# AWS NodeJS related files
-MainRule id:20000085 "s:$UWA:8" "str:awsconfig" "mz:URL" "msg:Exposed AWS config files";
-MainRule id:20000086 "s:$UWA:8" "str:aws-config" "mz:URL" "msg:Exposed AWS config files";
-MainRule id:20000087 "s:$UWA:8" "str:awscred" "mz:URL" "msg:Exposed AWS config files";
-MainRule id:20000088 "s:$UWA:8" "str:aws-cred" "mz:URL" "msg:Exposed AWS config files";
-
-# Text editors temp and config files
-MainRule id:20000089 "s:$UWA:8" "str:.old" "mz:URL" "msg:Exposed temp copy";
-MainRule id:20000090 "s:$UWA:8" "str:.save" "mz:URL" "msg:Exposed temp copy";
-MainRule id:20000091 "s:$UWA:8" "str:.DS_Store" "mz:URL" "msg:Exposed temp copy";
-MainRule id:20000092 "s:$UWA:8" "str:vscode" "mz:URL" "msg:Exposed vscode directory";
-
-# Exposed .env
-MainRule id:20000093 "s:$UWA:8" "str:/.env" "mz:URL" "msg:access to .env file or dir";
-
-# androxgh0st exploit
-MainRule id:20000094 "s:$UWA:8" "str:androxgh0st" "mz:ANY" "msg:androxgh0st exploit";
--- a/containers/conf/angie/naxsi_rules/blocking/blocking/30000000_wordpress.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/blocking/30000000_wordpress.rules
@ -1,16 +0,0 @@
-#######################################
-## Wordpress ids: 30000000           ##
-#######################################
-
-MainRule id:30000000 "s:$UWA:8" "str:system.multicall" "mz:$URL:/xmlrpc.php|BODY" "msg:Wordpress XMLRPC possible Password Brute Force";
-MainRule id:30000001 "s:$UWA:8" "str:system.listmethods" "mz:$URL:/xmlrpc.php|BODY" "msg:WordPress XMLRPC Enumeration system.listMethods";
-MainRule id:30000002 "s:$UWA:8" "str:system.getcapabilities" "mz:$URL:/xmlrpc.php|BODY" "msg:WordPress XMLRPC Enumeration system.getCapabilities";
-MainRule id:30000003 "s:$UWA:8" "str:/w3tc/dbcache" "mz:URL" "msg:WordPress TotalCache-DBCache-Access";
-MainRule id:30000004 "s:$UWA:8" "str:/uploadify/uploadify.php" "mz:URL" "msg:WordPress Uploadify-Access";
-MainRule id:30000005 "s:$UWA:8" "str:/wp-content/plugins/mm-forms-community/upload/temp/" "mz:URL" "msg:Access To mm-forms-community upload dir";
-MainRule id:30000006 "s:$UWA:8" "str:wp-config.php" "mz:BODY|ARGS|URL" "msg:WordPress access to wp-config.php";
-
-# block malicious access ALFA_DATA|alfacgiapi|cgialfa path
-MainRule id:30000007 "s:$UWA:8" "str:ALFA_DATA" "mz:URL" "msg:WordPress malicious access to ALFA_DATA path";
-MainRule id:30000008 "s:$UWA:8" "str:alfacgiapi" "mz:URL" "msg:WordPress malicious access to alfacgiapi path";
-MainRule id:30000009 "s:$UWA:8" "str:cgialfa" "mz:URL" "msg:WordPress malicious access to cgialfa path";
--- a/containers/conf/angie/naxsi_rules/blocking/blocking/40000000_php_security.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/blocking/40000000_php_security.rules
@ -1,66 +0,0 @@
-#######################################
-## PHP Security ids: 40000000        ##
-#######################################
-
-# Php Functions
-MainRule id:40000000 "s:$UWA:8" "str:gzinflate(" "mz:URL|BODY|ARGS" "msg:gzinflate in URI";
-MainRule id:40000001 "s:$UWA:8" "str:system(" "mz:URL|BODY|ARGS" "msg:php system called";
-MainRule id:40000002 "s:$UWA:8" "str:base64_decode(" "mz:URL|BODY|ARGS" "msg:php base64_decode called";
-MainRule id:40000003 "s:$UWA:8" "str:@eval" "mz:URL|BODY|ARGS" "msg:php eval called";
-MainRule id:40000004 "s:$UWA:8" "rx:eval\((\s+)?\$_" "mz:URL|BODY|ARGS" "msg:php eval called";
-
-# PhpMyAdmin
-MainRule id:40000005 "s:$UWA:8" "str:/db-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000006 "s:$UWA:8" "str:/dbadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000007 "s:$UWA:8" "str:/myadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000008 "s:$UWA:8" "str:/mysqldumper " "mz:URL" "msg:MysqlDumper";
-MainRule id:40000009 "s:$UWA:8" "str:/mysqlmanager" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000010 "s:$UWA:8" "str:/p/m/a/" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000011 "s:$UWA:8" "str:/php-my-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000012 "s:$UWA:8" "str:/php-myadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000013 "s:$UWA:8" "str:/phpmanager" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000014 "s:$UWA:8" "str:/phpmy" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000015 "s:$UWA:8" "str:/phpmy-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000016 "s:$UWA:8" "str:/phpmyadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000017 "s:$UWA:8" "str:/phppgadmin " "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000018 "s:$UWA:8" "str:/pma" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000019 "s:$UWA:8" "str:/sql-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000020 "s:$UWA:8" "str:/sqladmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000021 "s:$UWA:8" "str:/sqlweb" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000022 "s:$UWA:8" "str:/sysadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000023 "s:$UWA:8" "str:/webadmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000024 "s:$UWA:8" "str:/webdb" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000025 "s:$UWA:8" "str:/websql" "mz:URL" "msg:SQL Admin Interface";
-
-# Block PHPUnit eval-stdin.php CVE-2017-9841
-MainRule id:40000026 "s:$UWA:8" "str:eval-stdin.php" "mz:URL" "msg:CVE-2017-9841";
-
-# Block PHP easter egg which normally can be disabled via expose_php = off
-MainRule id:40000027 "s:$UWA:8" "rx:PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$" "mz:URL|BODY|ARGS" "msg:PHP easter egg credits";
-
-# Block PHP Xdebug
-MainRule id:40000028 "s:$UWA:8" "str:XDEBUG_SESSION" "mz:ANY" "msg:Block PHP Xdebug";
-
-# Block PHPinfo access
-MainRule id:40000029 "s:$UWA:8" "str:phpinfo" "mz:URL|BODY|ARGS" "msg:PHPinfo access";
-
-# Block known php installer exploit
-MainRule id:40000030 "s:$UWA:8" "str:install.php" "mz:URL" "msg:Access to php install";
-
-# Block more sql admin interface
-MainRule id:40000031 "s:$UWA:8" "str:/mysql-admin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000032 "s:$UWA:8" "str:/mysqladmin" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000033 "s:$UWA:8" "str:/sqlmanager" "mz:URL" "msg:SQL Admin Interface";
-MainRule id:40000034 "s:$UWA:8" "str:/mysql/" "mz:URL" "msg:SQL Admin Interface";
-
-# Block access to Lavarel telescope since it allows to read logs and SQL queries
-MainRule id:40000035 "s:$UWA:8" "str:/telescope/" "mz:URL" "msg:Access to Lavarel telescope";
-
-# Block access to adminer/phpMinAdmin sql admin interface
-MainRule id:40000036 "s:$UWA:8" "str:adminer" "mz:URL" "msg:SQL Admin Interface";
-
-# Block access to Symfony Web Framework dev mode.
-MainRule id:40000037 "s:$UWA:8" "str:app_dev" "mz:URL" "msg:Symfony Web Framework dev mode";
-
-# phpstorm in request
-MainRule id:40000038 "s:$UWA:8" "str:phpstorm" "mz:URL|ARGS|HEADERS" "msg:phpstorm in request";
--- a/containers/conf/angie/naxsi_rules/blocking/blocking/50000000_sql_injection.rules
+++ b/containers/conf/angie/naxsi_rules/blocking/blocking/50000000_sql_injection.rules
@ -1,15 +0,0 @@
-#######################################
-## SQL Injection ids: 50000000       ##
-#######################################
-
-# Transact-SQL General Extended Stored Procedures
-# https://docs.microsoft.com/en-us/sql/relational-databases/system-stored-procedures/general-extended-stored-procedures-transact-sql
-MainRule id:50000000 "s:$SQL:8" "rx:xp_(cmdshell|enumgroups|grantlogin|logevent|loginconfig|logininfo|msver|revokelogin|sprintf|sqlmaint|sscanf)" "mz:BODY|HEADERS|ARGS|URL" "msg:Transact-SQL GESP";
-
-# Classic SQL injection
-MainRule id:50000001 "s:$SQL:8" "rx:(CHAR|CONCAT|CONCAT_WS)\([0-9a-fx,]+\)" "mz:BODY|HEADERS|ARGS|URL" "msg:SQL Injection";
-MainRule id:50000002 "s:$SQL:8" "rx:SLEEP(\s+)?\(" "mz:BODY|HEADERS|ARGS|URL" "msg:SQL Injection";
-MainRule id:50000003 "s:$SQL:8" "rx:\bBENCHMARK\b\([0-9,]+.+\)" "mz:BODY|HEADERS|ARGS|URL" "msg:SQL Injection";
-MainRule id:50000004 "s:$SQL:8" "rx:\b(UNION|INFORMATION_SCHEMA)\b.*(#|--|\*)" "mz:BODY|HEADERS|ARGS|URL" "msg:SQL Injection";
-MainRule id:50000005 "s:$SQL:8" "rx:(MD\d|SHA\d+)(\s+)?\(" "mz:BODY|HEADERS|ARGS|URL" "msg:SQL Injection";
-MainRule id:50000006 "s:$SQL:8" "rx:DBMS_PIPE|RECEIVE_MESSAGE|WAITFOR|DELAY" "mz:BODY|HEADERS|ARGS|URL" "msg:SQL Injection";
--- a/containers/conf/angie/naxsi_rules/naxsi_core.rules
+++ b/containers/conf/angie/naxsi_rules/naxsi_core.rules
@ -1,95 +0,0 @@
-##################################
-## INTERNAL RULES IDS:1-999     ##
-##################################
-#@MainRule "msg:weird request, unable to parse" id:1;
-#@MainRule "msg:request too big, stored on disk and not parsed" id:2;
-#@MainRule "msg:invalid hex encoding, null bytes" id:10;
-#@MainRule "msg:unknown content-type" id:11;
-#@MainRule "msg:invalid formatted url" id:12;
-#@MainRule "msg:invalid POST format" id:13;
-#@MainRule "msg:invalid POST boundary" id:14;
-#@MainRule "msg:invalid JSON" id:15;
-#@MainRule "msg:empty POST" id:16;
-#@MainRule "msg:libinjection_sql" id:17;
-#@MainRule "msg:libinjection_xss" id:18;
-#@MainRule "msg:no generic rules" id:19;
-#@MainRule "msg:bad utf8" id:20;
-#@MainRule "msg:illegal host header" id:21;
-
-##################################
-## SQL Injections IDs:1000-1099 ##
-##################################
-MainRule "rx:select|union|update|delete|insert|table|from|ascii|hex|unhex|drop|load_file|substr|group_concat|dumpfile|bigint" "msg:sql keywords" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:4" id:1000;
-MainRule "str:\"" "msg:double quote" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:8,$XSS:8" id:1001;
-MainRule "str:0x" "msg:0x, possible hex encoding" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:2" id:1002;
-## Hardcore rules
-MainRule "str:/*" "msg:mysql comment (/*)" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:8" id:1003;
-MainRule "str:*/" "msg:mysql comment (*/)" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:8" id:1004;
-MainRule "str:|" "msg:mysql keyword (|)"  "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:8" id:1005;
-MainRule "str:&&" "msg:mysql keyword (&&)" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:8" id:1006;
-## end of hardcore rules
-MainRule "str:--" "msg:mysql comment (--)" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:4" id:1007;
-MainRule "str:;" "msg:semicolon" "mz:BODY|URL|ARGS" "s:$SQL:4,$XSS:8" id:1008;
-MainRule "str:=" "msg:equal sign in var, probable sql/xss" "mz:ARGS|BODY" "s:$SQL:2" id:1009;
-MainRule "str:(" "msg:open parenthesis, probable sql/xss" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$SQL:4,$XSS:8" id:1010;
-MainRule "str:)" "msg:close parenthesis, probable sql/xss" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$SQL:4,$XSS:8" id:1011;
-MainRule "str:'" "msg:simple quote" "mz:ARGS|BODY|URL|$HEADERS_VAR:Cookie" "s:$SQL:4,$XSS:8" id:1013;
-MainRule "str:," "msg:comma" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:4" id:1015;
-MainRule "str:#" "msg:mysql comment (#)" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:4" id:1016;
-MainRule "str:@@" "msg:double arobase (@@)" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:4" id:1017;
-MainRule "rx:::json|to_json|jsonb?_build|jsonb?_object|jsonb?_each|jsonb?_extract|jsonb?_typeof|jsonb?_array|jsonb_set|json_query|json_keys" "msg:json functions and operators" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$SQL:8" id:1018;
-
-###############################
-## OBVIOUS RFI IDs:1100-1199 ##
-###############################
-MainRule "str:http://" "msg:http:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1100;
-MainRule "str:https://" "msg:https:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1101;
-MainRule "str:ftp://" "msg:ftp:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1102;
-MainRule "str:php://" "msg:php:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1103;
-MainRule "str:sftp://" "msg:sftp:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1104;
-MainRule "str:zlib://" "msg:zlib:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1105;
-MainRule "str:data://" "msg:data:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1106;
-MainRule "str:glob://" "msg:glob:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1107;
-MainRule "str:phar://" "msg:phar:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1108;
-MainRule "str:file://" "msg:file:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1109;
-MainRule "str:gopher://" "msg:gopher:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1110;
-MainRule "str:zip://" "msg:zip:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1111;
-MainRule "str:expect://" "msg:expect:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1112;
-MainRule "str:input://" "msg:input:// scheme" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$RFI:8" id:1113;
-
-#######################################
-## Directory traversal IDs:1200-1299 ##
-#######################################                                          
-MainRule "str:.." "msg:double dot" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1200;
-MainRule "str:/etc/passwd" "msg:obvious probe" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1202;
-MainRule "str:c:\\" "msg:obvious windows path" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1203;
-MainRule "str:cmd.exe" "msg:obvious probe" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1204;
-MainRule "str:\\" "msg:backslash" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1205;
-#MainRule "str:/" "msg:slash in args" "mz:ARGS|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:2" id:1206;
-MainRule "str:/..;/" "msg:dir traversal bypass" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:2" id:1207;
-MainRule "str:/.;/" "msg:dir traversal bypass" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1208;
-MainRule "str:/.%2e/" "msg:dir traversal bypass" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1209;
-MainRule "str:/%2e./" "msg:dir traversal bypass" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$TRAVERSAL:4" id:1210;
-
-########################################
-## Cross Site Scripting IDs:1300-1399 ##
-########################################
-MainRule "str:<" "msg:html open tag" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$XSS:8" id:1302;
-MainRule "str:>" "msg:html close tag" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$XSS:8" id:1303;
-MainRule "str:[" "msg:open square backet ([), possible js" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$XSS:4" id:1310;
-MainRule "str:]" "msg:close square bracket (]), possible js" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$XSS:4" id:1311;
-MainRule "str:~" "msg:tilde (~) character" "mz:BODY|URL|ARGS|$HEADERS_VAR:Cookie" "s:$XSS:4" id:1312;
-MainRule "str:`"  "msg:grave accent (`)" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$XSS:8" id:1314;
-MainRule "rx:%[23]."  "msg:double encoding" "mz:ARGS|URL|BODY|$HEADERS_VAR:Cookie" "s:$XSS:8" id:1315;
-
-####################################
-## Evading tricks IDs: 1400-1500 ##
-####################################
-MainRule "str:&#" "msg:utf7/8 encoding" "mz:ARGS|BODY|URL|$HEADERS_VAR:Cookie" "s:$EVADE:4" id:1400;
-MainRule "str:%U" "msg:M$ encoding" "mz:ARGS|BODY|URL|$HEADERS_VAR:Cookie" "s:$EVADE:4" id:1401;
-
-#############################
-## File uploads: 1500-1600 ##
-#############################
-MainRule "rx:\.ph|\.asp|\.ht|\.jsp" "msg:asp/php/jsp/htaccess file upload" "mz:FILE_EXT" "s:$UPLOAD:8" id:1500;
-MainRule "rx:^[\.a-z0-9_\- ]+$" negative "msg:uploaded filename contains non-printable ascii chars" "mz:FILE_EXT" "s:$UPLOAD:8" id:1501;
--- a/containers/conf/angie/naxsi_rules/whitelists/dokuwiki.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/dokuwiki.rules
@ -1,7 +0,0 @@
-# DokuWiki rules
-
-BasicRule wl:1015 "mz:$BODY_VAR:usergroups";
-BasicRule wl:0 "mz:$BODY_VAR:wikitext";
-BasicRule wl:0 "mz:$BODY_VAR:summary";
-BasicRule wl:0 "mz:$BODY_VAR:prefix";
-BasicRule wl:0 "mz:$BODY_VAR:suffix";
--- a/containers/conf/angie/naxsi_rules/whitelists/drupal.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/drupal.rules
@ -1,61 +0,0 @@
-####################################
-## Drupal whitelists ALPHA        ##
-####################################
-
-# some url patterns
-BasicRule wl:1000 "mz:$URL:/modules/update/update.css|URL";
-BasicRule wl:1000 "mz:$URL:/misc/tableselect.js|URL";
-BasicRule wl:1000 "mz:$URL:/modules/contextual/images/gear-select.png|URL|$HEADERS_VAR:cookie";
-BasicRule wl:1000 "mz:$URL:/misc/ui/jquery.ui.sortable.min.js|URL|$HEADERS_VAR:cookie";
-BasicRule wl:1000 "mz:$URL:/misc/tableheader.js|URL|$HEADERS_VAR:cookie";
-BasicRule wl:1000 "mz:$URL:/misc/tabledrag.js|URL|$HEADERS_VAR:cookie";
-
-# bad keywords in posts etc (update etc)
-BasicRule wl:1000 "mz:$URL:/|$BODY_VAR:comment_confirm_delete|NAME";
-BasicRule wl:1000 "mz:$URL:/|$ARGS_VAR:q";
-BasicRule wl:1000 "mz:$URL:/|$BODY_VAR:form_id";
-BasicRule wl:1000 "mz:$URL:/|$HEADERS_VAR:cookie";
-BasicRule wl:1010 "mz:$URL:/|$ARGS_VAR:date";
-
-# XSS because of [ and ] in POST variables
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^body|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^menu|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^path|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^comment_body|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^field_|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^type|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^modules|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^blocks|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^palette|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^regions|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^roles|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^fields|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$ARGS_VAR_X:^destination|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^filter|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^search_active_modules|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^shortcuts|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^formats|NAME";
-
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:status";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:role";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:permission";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:type";
-
-# update module
-BasicRule wl:16 "mz:$URL:/|BODY";
-
-# user mail
-BasicRule wl:1007,1010,1011,1013,1015,1310,1311 "mz:$URL:/|$BODY_VAR_X:^user_mail";
-
-# other stuff
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:form_build_id";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:menu[parent]";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:form_token";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:additional_settings__active_tab";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:date";
-
-BasicRule wl:1302,1303 "mz:$URL:/|$BODY_VAR_X:^filters";
-BasicRule wl:1010,1011 "mz:$URL:/|$BODY_VAR:actions_label";
-BasicRule wl:1015 "mz:$URL:/|$BODY_VAR:date_format_long";
-BasicRule wl:1009,1016 "mz:$URL:/|$ARGS_VAR:destination";
-BasicRule wl:1016 "mz:$URL:/|$BODY_VAR_X:^palette";
--- a/containers/conf/angie/naxsi_rules/whitelists/etherpad-lite.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/etherpad-lite.rules
@ -1,7 +0,0 @@
-# Etherpad: Really real-time collaborative document editing http://etherpad.org
-BasicRule wl:1001,1008,1010,1011,1013,1015,1101 "mz:$URL:/jserror|$BODY_VAR:errorinfo";
-BasicRule wl:2 "mz:$URL_X:^/p/.*/import$|BODY";
-BasicRule wl:1311 "mz:$URL_X:^/p/.*]$|URL";
-BasicRule wl:1007 "mz:URL";
-BasicRule wl:1315 "mz:$HEADERS_VAR:cookie";
-BasicRule wl:11 "mz:$URL:/socket.io/|BODY";
--- a/containers/conf/angie/naxsi_rules/whitelists/iris.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/iris.rules
@ -1,10 +0,0 @@
-# Web IRC client Iris for the atheme platform https://github.com/atheme-legacy/iris
-### Allowed chars in the URI of WebChat Wizard "custom link" or "embed"
-BasicRule wl:1000,1315 "mz:$HEADERS_VAR:cookie";
-BasicRule wl:1015 "mz:$ARGS_VAR:channels";
-BasicRule wl:1000,1002,1005,1007,1013,1200,1205,1310,1311,1314 "mz:$ARGS_VAR:nick";
-BasicRule wl:1000,1005,1008,1013,1015,1200,1205 "mz:$URL:/|ARGS";
-### Allowed chars in Chat and Private
-BasicRule wl:0 "mz:$URL:/e/p|$BODY_VAR:c";
-### Allowed chars in nick same as are allowed in IRCD
-BasicRule wl:1000,1002,1005,1007,1205,1310,1311,1314 "mz:$URL:/e/n|$BODY_VAR:nick";
--- a/containers/conf/angie/naxsi_rules/whitelists/rutorrent.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/rutorrent.rules
@ -1,10 +0,0 @@
-BasicRule wl:1005,1010,1011,1315 "mz:$HEADERS_VAR:cookie";
-BasicRule wl:1402 "mz:$HEADERS_VAR:content-type";
-BasicRule wl:11 "mz:$URL:/rutorrent/php/setsettings.php|BODY";
-BasicRule wl:11 "mz:$URL:/rutorrent/php/getsettings.php|BODY";
-BasicRule wl:1000,1001,1015,1310,1311 "mz:$BODY_VAR:v";
-BasicRule wl:1005,1008 "mz:$BODY_VAR:cookie";
-BasicRule wl:1000,1100,1101,1315 "mz:$BODY_VAR:url";
-BasicRule wl:1310,1311 "mz:$URL:/rutorrent/php/addtorrent.php|$ARGS_VAR:result[]|NAME";
-BasicRule wl:1000,1100,1101 "mz:$ARGS_VAR:name[]";
-BasicRule wl:1310,1311 "mz:$URL:/rutorrent/php/addtorrent.php|$ARGS_VAR:name[]|NAME";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/dokuwiki.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/dokuwiki.rules
@ -1,7 +0,0 @@
-# DokuWiki rules
-
-BasicRule wl:1015 "mz:$BODY_VAR:usergroups";
-BasicRule wl:0 "mz:$BODY_VAR:wikitext";
-BasicRule wl:0 "mz:$BODY_VAR:summary";
-BasicRule wl:0 "mz:$BODY_VAR:prefix";
-BasicRule wl:0 "mz:$BODY_VAR:suffix";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/drupal.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/drupal.rules
@ -1,61 +0,0 @@
-####################################
-## Drupal whitelists ALPHA        ##
-####################################
-
-# some url patterns
-BasicRule wl:1000 "mz:$URL:/modules/update/update.css|URL";
-BasicRule wl:1000 "mz:$URL:/misc/tableselect.js|URL";
-BasicRule wl:1000 "mz:$URL:/modules/contextual/images/gear-select.png|URL|$HEADERS_VAR:cookie";
-BasicRule wl:1000 "mz:$URL:/misc/ui/jquery.ui.sortable.min.js|URL|$HEADERS_VAR:cookie";
-BasicRule wl:1000 "mz:$URL:/misc/tableheader.js|URL|$HEADERS_VAR:cookie";
-BasicRule wl:1000 "mz:$URL:/misc/tabledrag.js|URL|$HEADERS_VAR:cookie";
-
-# bad keywords in posts etc (update etc)
-BasicRule wl:1000 "mz:$URL:/|$BODY_VAR:comment_confirm_delete|NAME";
-BasicRule wl:1000 "mz:$URL:/|$ARGS_VAR:q";
-BasicRule wl:1000 "mz:$URL:/|$BODY_VAR:form_id";
-BasicRule wl:1000 "mz:$URL:/|$HEADERS_VAR:cookie";
-BasicRule wl:1010 "mz:$URL:/|$ARGS_VAR:date";
-
-# XSS because of [ and ] in POST variables
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^body|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^menu|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^path|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^comment_body|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^field_|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^type|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^modules|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^blocks|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^palette|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^regions|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^roles|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^fields|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$ARGS_VAR_X:^destination|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^filter|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^search_active_modules|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^shortcuts|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR_X:^formats|NAME";
-
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:status";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:role";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:permission";
-BasicRule wl:1310,1311 "mz:$URL:/|$BODY_VAR:type";
-
-# update module
-BasicRule wl:16 "mz:$URL:/|BODY";
-
-# user mail
-BasicRule wl:1007,1010,1011,1013,1015,1310,1311 "mz:$URL:/|$BODY_VAR_X:^user_mail";
-
-# other stuff
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:form_build_id";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:menu[parent]";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:form_token";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:additional_settings__active_tab";
-BasicRule wl:1007 "mz:$URL:/|$BODY_VAR:date";
-
-BasicRule wl:1302,1303 "mz:$URL:/|$BODY_VAR_X:^filters";
-BasicRule wl:1010,1011 "mz:$URL:/|$BODY_VAR:actions_label";
-BasicRule wl:1015 "mz:$URL:/|$BODY_VAR:date_format_long";
-BasicRule wl:1009,1016 "mz:$URL:/|$ARGS_VAR:destination";
-BasicRule wl:1016 "mz:$URL:/|$BODY_VAR_X:^palette";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/etherpad-lite.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/etherpad-lite.rules
@ -1,7 +0,0 @@
-# Etherpad: Really real-time collaborative document editing http://etherpad.org
-BasicRule wl:1001,1008,1010,1011,1013,1015,1101 "mz:$URL:/jserror|$BODY_VAR:errorinfo";
-BasicRule wl:2 "mz:$URL_X:^/p/.*/import$|BODY";
-BasicRule wl:1311 "mz:$URL_X:^/p/.*]$|URL";
-BasicRule wl:1007 "mz:URL";
-BasicRule wl:1315 "mz:$HEADERS_VAR:cookie";
-BasicRule wl:11 "mz:$URL:/socket.io/|BODY";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/generic.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/generic.rules
@ -1,5 +0,0 @@
-# whitelist robots.txt
-BasicRule wl:20000003 "mz:$URL:/robots.txt|URL";
-
-# whitelist /.well-known/security.txt
-BasicRule wl:20000003,20000045 "mz:$URL:/.well-known/security.txt|URL";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/iris.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/iris.rules
@ -1,10 +0,0 @@
-# Web IRC client Iris for the atheme platform https://github.com/atheme-legacy/iris
-### Allowed chars in the URI of WebChat Wizard "custom link" or "embed"
-BasicRule wl:1000,1315 "mz:$HEADERS_VAR:cookie";
-BasicRule wl:1015 "mz:$ARGS_VAR:channels";
-BasicRule wl:1000,1002,1005,1007,1013,1200,1205,1310,1311,1314 "mz:$ARGS_VAR:nick";
-BasicRule wl:1000,1005,1008,1013,1015,1200,1205 "mz:$URL:/|ARGS";
-### Allowed chars in Chat and Private
-BasicRule wl:0 "mz:$URL:/e/p|$BODY_VAR:c";
-### Allowed chars in nick same as are allowed in IRCD
-BasicRule wl:1000,1002,1005,1007,1205,1310,1311,1314 "mz:$URL:/e/n|$BODY_VAR:nick";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/jellyfin.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/jellyfin.rules
@ -1,124 +0,0 @@
-# Jellyfin rules
-
-# global
-BasicRule wl:2,11 "mz:BODY";
-BasicRule wl:17 "mz:$HEADERS_VAR:accept";
-BasicRule wl:1000 "mz:URL";
-BasicRule wl:1000,1002 "mz:$HEADERS_VAR:cookie";
-
-# /Users.*
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^Fields$|$URL_X:^/Users.*$";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^EnableImageTypes$|$URL_X:^/Users.*$";
-BasicRule wl:1000 "mz:$BODY_VAR_X:^RememberAudioSelections$|NAME|$URL_X:^/Users/[0-9a-f-]*.*$";
-BasicRule wl:1000 "mz:$BODY_VAR_X:^RememberSubtitleSelections$|NAME|$URL_X:^/Users/[0-9a-f-]*.*$";
-BasicRule wl:1015 "mz:$ARGS_VAR_X:^SortBy$|$URL_X:^/Users.*$";
-BasicRule wl:1015 "mz:$ARGS_VAR_X:^Ids$|$URL_X:^/Users.*$";
-BasicRule wl:1015 "mz:$ARGS_VAR_X:^MediaTypes$|$URL_X:^/Users.*$";
-BasicRule wl:1015 "mz:$ARGS_VAR_X:^SortOrder$|$URL_X:^/Users/[0-9a-f-]*/Items$";
-BasicRule wl:1015 "mz:$ARGS_VAR_X:^IncludeItemTypes$|$URL_X:^/Users/[0-9a-f-]*/Items$";
-
-# /Users/authenticatebyname
-BasicRule wl:1010,1011,1012,1302 "mz:$BODY_VAR:Pw|$URL:/Users/authenticatebyname";
-
-# /UserItems/Resume
-BasicRule wl:1015 "mz:$ARGS_VAR:fields|$URL:/UserItems/Resume";
-
-# /Shows.*
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^Fields$|$URL_X:^/Shows/[0-9a-f-]*/Seasons$";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^Fields$|$URL_X:^/Shows/[0-9a-f-]*/Episodes$";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^EnableImageTypes$|$URL_X:^/Shows/NextUp.*$";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^Fields$|$URL_X:^/Shows/NextUp.*$";
-BasicRule wl:1000 "mz:$ARGS_VAR_X:^NextUpDateCutoff$|$URL_X:^/Shows/NextUp.*$";
-BasicRule wl:1015 "mz:$ARGS_VAR:StartIndex|$URL:/Shows/NextUp?";
-
-# /DisplayPreferences
-BasicRule wl:15,1000,1001,1015,1101,1205 "mz:BODY|$URL:/DisplayPreferences/usersettings";
-BasicRule wl:1000 "mz:$BODY_VAR_X:^chromecastVersion$|$URL_X:^/DisplayPreferences/[0-9a-f-]*$";
-BasicRule wl:1000 "mz:$BODY_VAR_X:^ShowBackdrop$|NAME|$URL_X:^/DisplayPreferences/[0-9a-f-]*$";
-BasicRule wl:1101 "mz:BODY|NAME|$URL:/DisplayPreferences/usersettings";
-
-# /Items.*
-BasicRule wl:17 "mz:$HEADERS_VAR_X:^accept$|$URL_X:^/Items/[0-9a-f-]*/.*$";
-BasicRule wl:1000 "mz:URL|$URL_X:^/Items/[0-9a-f-]*/.*$";
-BasicRule wl:1000 "mz:$ARGS_VAR_X:^inheritFromParent$|NAME|$URL_X:^/Items/[0-9a-f-]*/ThemeMedia$";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^Fields$|$URL_X:^/Items.*$";
-BasicRule wl:1005 "mz:$BODY_VAR_X:^Value$|$URL_X:^/Items/[0-9a-f-]*/PlaybackInfo$";
-BasicRule wl:1013,1100 "mz:$ARGS_VAR:searchTerm|$URL:/Items";
-BasicRule wl:1015 "mz:$BODY_VAR_X:^VideoCodec$|$URL_X:^/Items/[0-9a-f-]*/PlaybackInfo$";
-BasicRule wl:1015 "mz:$BODY_VAR_X:^AudioCodec$|$URL_X:^/Items/[0-9a-f-]*/PlaybackInfo$";
-BasicRule wl:1015 "mz:$BODY_VAR_X:^Container$|$URL_X:^/Items/[0-9a-f-]*/PlaybackInfo$";
-BasicRule wl:1015 "mz:$ARGS_VAR:ExcludeLocationTypes|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:Fields|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:Filters|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:ImageTypes|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:IncludeItemTypes|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:Recursive|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:SortBy|$URL:/Items?";
-BasicRule wl:1015 "mz:$ARGS_VAR:SortOrder|$URL:/Items?";
-
-# /Shows/Upcoming
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:EnableImageTypes|$URL:/Shows/Upcoming";
-
-# /Movies/Recommendations
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:Fields|$URL:/Movies/Recommendations";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:EnableImageTypes|$URL:/Movies/Recommendations";
-
-# /System/Configuration
-BasicRule wl:1013,1015 "mz:$BODY_VAR:SortRemoveCharacters|$URL:/System/Configuration";
-BasicRule wl:1000 "mz:$BODY_VAR:LibraryUpdateDuration|$URL:/System/Configuration";
-BasicRule wl:1000 "mz:$BODY_VAR:Name|$URL:/System/Configuration";
-BasicRule wl:1101 "mz:$BODY_VAR:Url|$URL:/System/Configuration";
-BasicRule wl:50000006 "mz:$BODY_VAR:LibraryMonitorDelay|$URL:/System/Configuration";
-BasicRule wl:50000006 "mz:$BODY_VAR:ThrottleDelaySeconds|NAME|$URL:/System/Configuration/encoding";
-
-# /System/Configuration/branding
-BasicRule wl:1000,1001,1002,1003,1004,1008,1009,1010,1011,1015,1016,1205 "mz:$BODY_VAR:CustomCss|$URL:/System/Configuration/branding";
-BasicRule wl:1302 "mz:$BODY_VAR:LoginDisclaimer|$URL:/System/Configuration/branding";
-
-# /Sessions
-BasicRule wl:1000 "mz:$BODY_VAR:EventName|$URL:/Sessions/Playing/Progress";
-BasicRule wl:1000 "mz:$BODY_VAR:SupportedCommands|$URL:/Sessions/Capabilities";
-BasicRule wl:1000 "mz:$BODY_VAR:SupportedCommands|$URL:/Sessions/Capabilities/Full";
-BasicRule wl:1015 "mz:$BODY_VAR:AudioCodec|$URL:/Sessions/Capabilities/Full";
-BasicRule wl:1015 "mz:$BODY_VAR:VideoCodec|$URL:/Sessions/Capabilities/Full";
-BasicRule wl:1200 "mz:$HEADERS_VAR:cookie|$URL:/Sessions/Logout";
-
-# Branding
-BasicRule wl:1015 "mz:$BODY_VAR:Splashscreen|$URL:/Branding/Splashscreen";
-
-# /Library
-BasicRule wl:1005,1008,1205 "mz:$BODY_VAR:CustomTagDelimiters|$URL:/Library/VirtualFolders/LibraryOptions";
-
-# /Playlists
-BasicRule wl:1000,1015 "mz:$ARGS_VAR_X:^EnableImageTypes$|$URL_X:^/Playlists/[0-9a-f-]*/Items$";
-BasicRule wl:1015 "mz:$ARGS_VAR_X:^Fields$|$URL_X:^/Playlists/[0-9a-f-]*/Items$";
-
-# /SyncPlay
-BasicRule wl:1013 "mz:$BODY_VAR:GroupName|$URL:/SyncPlay/New";
-
-# /Videos.*
-BasicRule wl:12 "mz:ARGS|$URL_X:^/videos/.*$";
-BasicRule wl:17 "mz:$HEADERS_VAR_X:^accept$|$URL_X:^/Videos/.*$";
-BasicRule wl:1015 "mz:ARGS|$URL_X:^/videos/.*$";
-
-# /LiveTv
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:EnableImageTypes|$URL:/LiveTv/Programs/Recommended";
-BasicRule wl:1015 "mz:$ARGS_VAR:Fields|$URL:/LiveTv/Programs";
-BasicRule wl:1015 "mz:$ARGS_VAR:Fields|$URL:/LiveTv/Programs/Recommended";
-
-# Playback Reporting Plugin
-
-# /user_usage_stats
-BasicRule wl:1015 "mz:$ARGS_VAR:filter|$URL:/user_usage_stats/PlayActivity";
-BasicRule wl:1015 "mz:$ARGS_VAR:filter|$URL:/user_usage_stats/HourlyReport";
-BasicRule wl:1015 "mz:$ARGS_VAR:filter|$URL:/user_usage_stats/DurationHistogramReport";
-
-# Artist
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:fields|$URL:/Artists";
-BasicRule wl:1013,1100 "mz:$ARGS_VAR:searchTerm|$URL:/Artists";
-BasicRule wl:1015 "mz:$ARGS_VAR:SortBy|$URL:/Artists";
-
-# Persons
-BasicRule wl:1000,1013 "mz:$ARGS_VAR:fields|$URL:/Persons";
-BasicRule wl:1015 "mz:$ARGS_VAR:SortBy|$URL:/Persons";
-BasicRule wl:1100 "mz:$ARGS_VAR:searchTerm|$URL:/Persons";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/rutorrent.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/rutorrent.rules
@ -1,10 +0,0 @@
-BasicRule wl:1005,1010,1011,1315 "mz:$HEADERS_VAR:cookie";
-BasicRule wl:1402 "mz:$HEADERS_VAR:content-type";
-BasicRule wl:11 "mz:$URL:/rutorrent/php/setsettings.php|BODY";
-BasicRule wl:11 "mz:$URL:/rutorrent/php/getsettings.php|BODY";
-BasicRule wl:1000,1001,1015,1310,1311 "mz:$BODY_VAR:v";
-BasicRule wl:1005,1008 "mz:$BODY_VAR:cookie";
-BasicRule wl:1000,1100,1101,1315 "mz:$BODY_VAR:url";
-BasicRule wl:1310,1311 "mz:$URL:/rutorrent/php/addtorrent.php|$ARGS_VAR:result[]|NAME";
-BasicRule wl:1000,1100,1101 "mz:$ARGS_VAR:name[]";
-BasicRule wl:1310,1311 "mz:$URL:/rutorrent/php/addtorrent.php|$ARGS_VAR:name[]|NAME";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/wordpress-minimal.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/wordpress-minimal.rules
@ -1,26 +0,0 @@
-#########                                                                 #########
-######                                                                       ######
-### Because of wordpress.rules is full of wl rules even got double.             ###
-### Thats why I start from scratch so these rules are in BETA us on own risk.   ###
-### I us not that many plugins and those I use only after I checked there code. ###
-######                                                                       ######
-#########                                                                 #########
-### HEADERS
-BasicRule wl:1001,1315 "mz:$HEADERS_VAR:cookie";
-###	Theme customize
-BasicRule wl:1001,1015,1310,1311 "mz:$URL_X:^/.*$|$BODY_VAR_X:^customized$|BODY";
-###	Widget customize
-BasicRule wl:1001,1015,1310,1311 "mz:$URL_X:^/.*$|$BODY_VAR_X:^partials$|BODY";
-### oEmbed API
-BasicRule wl:1000,1009,1101 "mz:$URL_X:^/.*wp-json/oembed/1.0/embed|$ARGS_VAR_X:^url$";
-BasicRule wl:1009,1101 "mz:$URL_X:^/.*wp-json/oembed/1.0/embed|ARGS";
-BasicRule wl:1009,1101 "mz:ARGS";
-###	Trackbacks
-BasicRule wl:1005,1008,1010,1011,1015,1016,1100,1101,1400 "mz:$URL_X:^/.*trackback$/|BODY";
-BasicRule wl:1005,1008,1010,1011,1015,1016,1100,1101,1400 "mz:BODY";
-BasicRule wl:1008,1010,1011,1015,1016,1100,1101,1400 "mz:$URL_X:^/.*trackback$/|$BODY_VAR_X:^excerpt$";
-BasicRule wl:1008,1010,1011,1015,1016,1100,1101,1400 "mz:$BODY_VAR:excerpt";
-BasicRule wl:1101 "mz:$URL_X:^/.*trackback$/|$BODY_VAR_X:^url$";
-BasicRule wl:1005 "mz:$URL_X:^/.*trackback$/|$BODY_VAR_X:^title$";
-BasicRule wl:1101 "mz:$BODY_VAR:url";
-BasicRule wl:1005 "mz:$BODY_VAR:title";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/wordpress.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/wordpress.rules
@ -1,152 +0,0 @@
-# WordPress naxsi rules
-
-### HEADERS
-BasicRule wl:1000,1001,1005,1007,1010,1011,1013,1100,1101,1200,1308,1309,1310,1311,1315 "mz:$HEADERS_VAR:cookie";
-# xmlrpc
-BasicRule wl:1402 "mz:$HEADERS_VAR:content-type";
-
-### simple BODY (POST)
-BasicRule wl:1001,1009,1015,1016,1101,1310,1311 "mz:$URL:/|$BODY_VAR:customized";
-# comments
-BasicRule wl:1000,1010,1011,1013,1015,1200,1310,1311 "mz:$BODY_VAR:post_title";
-BasicRule wl:1000 "mz:$BODY_VAR:original_publish";
-BasicRule wl:1000 "mz:$BODY_VAR:save";
-BasicRule wl:1008,1010,1011,1013,1015 "mz:$BODY_VAR:sk2_my_js_payload";
-BasicRule wl:1001,1005,1009,1016,1100,1101,1310 "mz:$BODY_VAR:url";
-BasicRule wl:1009,1100,1101 "mz:$BODY_VAR:referredby";
-BasicRule wl:1009,1100,1101 "mz:$BODY_VAR:_wp_original_http_referer";
-BasicRule wl:1000,1001,1005,1007,1008,1009,1010,1011,1013,1015,1016,1100,1101,1200,1302,1303,1310,1311,1315,1400 "mz:$BODY_VAR:comment";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:redirect_to";
-BasicRule wl:1000,1009,1315 "mz:$BODY_VAR:_wp_http_referer";
-BasicRule wl:1000 "mz:$BODY_VAR:action";
-BasicRule wl:1001,1013 "mz:$BODY_VAR:blogname";
-BasicRule wl:1013,1015 "mz:$BODY_VAR:blogdescription";
-BasicRule wl:1015 "mz:$BODY_VAR:date_format_custom";
-BasicRule wl:1015 "mz:$BODY_VAR:date_format";
-BasicRule wl:1015 "mz:$BODY_VAR:tax_input%5bpost_tag%5d";
-BasicRule wl:1015 "mz:$BODY_VAR:tax_input[post_tag]";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:siteurl";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:home";
-BasicRule wl:1000,1015 "mz:$BODY_VAR:submit";
-# news content matches pretty much everything
-BasicRule wl:0 "mz:$BODY_VAR:content";
-BasicRule wl:1000 "mz:$BODY_VAR:delete_option";
-BasicRule wl:1000 "mz:$BODY_VAR:prowl-msg-message";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:_url";
-BasicRule wl:1001,1009 "mz:$BODY_VAR:c2c_text_replace%5btext_to_replace%5d";
-BasicRule wl:1200 "mz:$BODY_VAR:ppn_post_note";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:author";
-BasicRule wl:1001,1015 "mz:$BODY_VAR:excerpt";
-BasicRule wl:1015 "mz:$BODY_VAR:catslist";
-BasicRule wl:1005,1008,1009,1010,1011,1015,1315 "mz:$BODY_VAR:cookie";
-BasicRule wl:1101 "mz:$BODY_VAR:googleplus";
-BasicRule wl:1007 "mz:$BODY_VAR:name";
-BasicRule wl:1007 "mz:$BODY_VAR:action";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:attachment%5burl%5d";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:attachment_url";
-BasicRule wl:1001,1009,1100,1101,1302,1303,1310,1311 "mz:$BODY_VAR:html";
-BasicRule wl:1015 "mz:$BODY_VAR:title";
-BasicRule wl:1001,1009,1015 "mz:$BODY_VAR:recaptcha_challenge_field";
-BasicRule wl:1011 "mz:$BODY_VAR:pwd";
-BasicRule wl:1000 "mz:$BODY_VAR:excerpt";
-
-### BODY|NAME
-BasicRule wl:1000 "mz:$BODY_VAR:delete_option|NAME";
-BasicRule wl:1000 "mz:$BODY_VAR:from|NAME";
-
-### Simple ARGS (GET)
-# WP login screen
-BasicRule wl:1100,1101 "mz:$ARGS_VAR:redirect_to";
-BasicRule wl:1000,1009 "mz:$ARGS_VAR:_wp_http_referer";
-BasicRule wl:1000 "mz:$ARGS_VAR:wp_http_referer";
-BasicRule wl:1000 "mz:$ARGS_VAR:action";
-BasicRule wl:1000 "mz:$ARGS_VAR:action2";
-# load and load[] GET variable
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:load";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:load[]";
-BasicRule wl:1015 "mz:$ARGS_VAR:q";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:load%5b%5d";
-
-### URL
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update-core.php";
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update.php";
-BasicRule wl:1000 "mz:$URL:/wp-includes/js/imgareaselect/imgareaselect.css|URL";
-BasicRule wl:1002 "mz:$URL_X:/wp-content/uploads/[0-9]{4}/[0-9]{2}/[^/]+\.jpg$|URL";
-# URL|ARGS
-BasicRule wl:1015 "mz:$URL:/wp-admin/load-styles.php|$ARGS_VAR:dashicons,admin-bar,wp-admin,buttons,wp-auth-check";
-BasicRule wl:1000 "mz:$URL:/wp-admin/about.php|$ARGS_VAR:updated";
-BasicRule wl:1009 "mz:$URL:/wp-admin/customize.php|$ARGS_VAR:return";
-# URL|BODY
-BasicRule wl:1009,1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_http_referer";
-BasicRule wl:1016 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect";
-BasicRule wl:11 "mz:$URL:/xmlrpc.php|BODY";
-BasicRule wl:11,16 "mz:$URL:/wp-cron.php|BODY";
-BasicRule wl:2 "mz:$URL:/wp-admin/async-upload.php|BODY";
-# URL|BODY|NAME
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_original_http_referer|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/user-edit.php|$BODY_VAR:from|NAME";
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:attachment%5burl%5d|NAME";
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:attachment_url|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/plugins.php|$BODY_VAR:verify-delete|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:post_category[]|NAME";
-BasicRule wl:1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:post_category|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:tax_input[post_tag]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:newtag[post_tag]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/users.php|$BODY_VAR:users[]|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/update-core.php|$BODY_VAR:Update%2BTranslations|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/update-core.php|$BODY_VAR:Update%2BNow|NAME";
-# URL|ARGS|NAME
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/load-scripts.php|$ARGS_VAR:load[]|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:delete_count|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:update|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/customize.php|$ARGS_VAR:autofocus[control]|NAME";
-
-# plain WP site
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update-core.php";
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update.php";
-# URL|BODY
-BasicRule wl:1009,1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_http_referer";
-BasicRule wl:1016 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect";
-BasicRule wl:11 "mz:$URL:/xmlrpc.php|BODY";
-BasicRule wl:11,16 "mz:$URL:/wp-cron.php|BODY";
-# URL|BODY|NAME
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_original_http_referer|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/user-edit.php|$BODY_VAR:from|NAME";
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:attachment%5burl%5d|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-auth-check]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-check-locked-posts][]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-refresh-post-lock][post_id]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-refresh-post-lock][lock]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/update-core.php|$BODY_VAR:checked[]|NAME";
-# URL|ARGS|NAME
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/load-scripts.php|$ARGS_VAR:load[]|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:delete_count|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:update|NAME";
-
-### Plugins
-#WP Minify
-BasicRule wl:1015 "mz:$URL:/wp-content/plugins/bwp-minify/min/|$ARGS_VAR:f";
-#Jetpack Infinite Scroll
-BasicRule wl:1310,1311 "mz:$BODY_VAR:scripts[]|NAME";
-BasicRule wl:1310,1311 "mz:$BODY_VAR:styles[]|NAME";
-BasicRule wl:1310,1311 "mz:$BODY_VAR_X:^query_args\[.*\]|NAME";
-BasicRule wl:1000 "mz:$BODY_VAR:query_args[update_post_term_cache]|NAME";
-BasicRule wl:1000 "mz:$BODY_VAR:query_args[update_post_meta_cache]|NAME";
-#UpdraftPlus
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/updraftplus/includes/select2/select2.min.css|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/updraftplus/includes/select2/select2.min.js|URL";
-#WP plugin updates
-BasicRule wl:1315 "mz:$ARGS_VAR:query|$URL:/wp-json/jetpack/v4/jitm";
-#Jetpack Google Fonts
-BasicRule wl:1001 "mz:$URL_X:^/wp-content/plugins/jetpack/css/.*|URL";
-#WooCommerce
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/woocommerce/assets/js/select2/select2.full.min.js|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/woocommerce/assets/js/selectWoo/selectWoo.full.min.js|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/woocommerce/assets/js/stupidtable/stupidtable.min.js|URL";
-#WPML
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/sitepress-multilingual-cms/lib/select2/select2.min.js|URL";
-#Yoast SEO
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/wordpress-seo/js/dist/select2/select2.full.min.js|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/wordpress-seo/css/dist/select2/select2.min.css|URL";
--- a/containers/conf/angie/naxsi_rules/whitelists/whitelists/zerobin.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/whitelists/zerobin.rules
@ -1,8 +0,0 @@
-# Zerobin is here in directory /paste if diffrent change $URL:/paste/ below
-BasicRule wl:1015 "mz:$URL:/paste/|$BODY_VAR:data";
-BasicRule wl:1315 "mz:$URL:/paste/|$HEADERS_VAR:cookie";
-BasicRule wl:1001 "mz:$URL:/paste/|$BODY_VAR:data";
-BasicRule wl:1009 "mz:$URL:/paste/|$BODY_VAR:data";
-BasicRule wl:1009 "mz:$URL:/paste/|$BODY_VAR:nickname";
-BasicRule wl:1001 "mz:$URL:/paste/|$BODY_VAR:nickname";
-BasicRule wl:1015 "mz:$URL:/paste/|$BODY_VAR:nickname";
--- a/containers/conf/angie/naxsi_rules/whitelists/wordpress-minimal.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/wordpress-minimal.rules
@ -1,26 +0,0 @@
-#########                                                                 #########
-######                                                                       ######
-### Because of wordpress.rules is full of wl rules even got double.             ###
-### Thats why I start from scratch so these rules are in BETA us on own risk.   ###
-### I us not that many plugins and those I use only after I checked there code. ###
-######                                                                       ######
-#########                                                                 #########
-### HEADERS
-BasicRule wl:1001,1315 "mz:$HEADERS_VAR:cookie";
-###	Theme customize
-BasicRule wl:1001,1015,1310,1311 "mz:$URL_X:^/.*$|$BODY_VAR_X:^customized$|BODY";
-###	Widget customize
-BasicRule wl:1001,1015,1310,1311 "mz:$URL_X:^/.*$|$BODY_VAR_X:^partials$|BODY";
-### oEmbed API
-BasicRule wl:1000,1009,1101 "mz:$URL_X:^/.*wp-json/oembed/1.0/embed|$ARGS_VAR_X:^url$";
-BasicRule wl:1009,1101 "mz:$URL_X:^/.*wp-json/oembed/1.0/embed|ARGS";
-BasicRule wl:1009,1101 "mz:ARGS";
-###	Trackbacks
-BasicRule wl:1005,1008,1010,1011,1015,1016,1100,1101,1400 "mz:$URL_X:^/.*trackback$/|BODY";
-BasicRule wl:1005,1008,1010,1011,1015,1016,1100,1101,1400 "mz:BODY";
-BasicRule wl:1008,1010,1011,1015,1016,1100,1101,1400 "mz:$URL_X:^/.*trackback$/|$BODY_VAR_X:^excerpt$";
-BasicRule wl:1008,1010,1011,1015,1016,1100,1101,1400 "mz:$BODY_VAR:excerpt";
-BasicRule wl:1101 "mz:$URL_X:^/.*trackback$/|$BODY_VAR_X:^url$";
-BasicRule wl:1005 "mz:$URL_X:^/.*trackback$/|$BODY_VAR_X:^title$";
-BasicRule wl:1101 "mz:$BODY_VAR:url";
-BasicRule wl:1005 "mz:$BODY_VAR:title";
--- a/containers/conf/angie/naxsi_rules/whitelists/wordpress.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/wordpress.rules
@ -1,152 +0,0 @@
-# WordPress naxsi rules
-
-### HEADERS
-BasicRule wl:1000,1001,1005,1007,1010,1011,1013,1100,1101,1200,1308,1309,1310,1311,1315 "mz:$HEADERS_VAR:cookie";
-# xmlrpc
-BasicRule wl:1402 "mz:$HEADERS_VAR:content-type";
-
-### simple BODY (POST)
-BasicRule wl:1001,1009,1015,1016,1101,1310,1311 "mz:$URL:/|$BODY_VAR:customized";
-# comments
-BasicRule wl:1000,1010,1011,1013,1015,1200,1310,1311 "mz:$BODY_VAR:post_title";
-BasicRule wl:1000 "mz:$BODY_VAR:original_publish";
-BasicRule wl:1000 "mz:$BODY_VAR:save";
-BasicRule wl:1008,1010,1011,1013,1015 "mz:$BODY_VAR:sk2_my_js_payload";
-BasicRule wl:1001,1005,1009,1016,1100,1101,1310 "mz:$BODY_VAR:url";
-BasicRule wl:1009,1100,1101 "mz:$BODY_VAR:referredby";
-BasicRule wl:1009,1100,1101 "mz:$BODY_VAR:_wp_original_http_referer";
-BasicRule wl:1000,1001,1005,1007,1008,1009,1010,1011,1013,1015,1016,1100,1101,1200,1302,1303,1310,1311,1315,1400 "mz:$BODY_VAR:comment";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:redirect_to";
-BasicRule wl:1000,1009,1315 "mz:$BODY_VAR:_wp_http_referer";
-BasicRule wl:1000 "mz:$BODY_VAR:action";
-BasicRule wl:1001,1013 "mz:$BODY_VAR:blogname";
-BasicRule wl:1013,1015 "mz:$BODY_VAR:blogdescription";
-BasicRule wl:1015 "mz:$BODY_VAR:date_format_custom";
-BasicRule wl:1015 "mz:$BODY_VAR:date_format";
-BasicRule wl:1015 "mz:$BODY_VAR:tax_input%5bpost_tag%5d";
-BasicRule wl:1015 "mz:$BODY_VAR:tax_input[post_tag]";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:siteurl";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:home";
-BasicRule wl:1000,1015 "mz:$BODY_VAR:submit";
-# news content matches pretty much everything
-BasicRule wl:0 "mz:$BODY_VAR:content";
-BasicRule wl:1000 "mz:$BODY_VAR:delete_option";
-BasicRule wl:1000 "mz:$BODY_VAR:prowl-msg-message";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:_url";
-BasicRule wl:1001,1009 "mz:$BODY_VAR:c2c_text_replace%5btext_to_replace%5d";
-BasicRule wl:1200 "mz:$BODY_VAR:ppn_post_note";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:author";
-BasicRule wl:1001,1015 "mz:$BODY_VAR:excerpt";
-BasicRule wl:1015 "mz:$BODY_VAR:catslist";
-BasicRule wl:1005,1008,1009,1010,1011,1015,1315 "mz:$BODY_VAR:cookie";
-BasicRule wl:1101 "mz:$BODY_VAR:googleplus";
-BasicRule wl:1007 "mz:$BODY_VAR:name";
-BasicRule wl:1007 "mz:$BODY_VAR:action";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:attachment%5burl%5d";
-BasicRule wl:1100,1101 "mz:$BODY_VAR:attachment_url";
-BasicRule wl:1001,1009,1100,1101,1302,1303,1310,1311 "mz:$BODY_VAR:html";
-BasicRule wl:1015 "mz:$BODY_VAR:title";
-BasicRule wl:1001,1009,1015 "mz:$BODY_VAR:recaptcha_challenge_field";
-BasicRule wl:1011 "mz:$BODY_VAR:pwd";
-BasicRule wl:1000 "mz:$BODY_VAR:excerpt";
-
-### BODY|NAME
-BasicRule wl:1000 "mz:$BODY_VAR:delete_option|NAME";
-BasicRule wl:1000 "mz:$BODY_VAR:from|NAME";
-
-### Simple ARGS (GET)
-# WP login screen
-BasicRule wl:1100,1101 "mz:$ARGS_VAR:redirect_to";
-BasicRule wl:1000,1009 "mz:$ARGS_VAR:_wp_http_referer";
-BasicRule wl:1000 "mz:$ARGS_VAR:wp_http_referer";
-BasicRule wl:1000 "mz:$ARGS_VAR:action";
-BasicRule wl:1000 "mz:$ARGS_VAR:action2";
-# load and load[] GET variable
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:load";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:load[]";
-BasicRule wl:1015 "mz:$ARGS_VAR:q";
-BasicRule wl:1000,1015 "mz:$ARGS_VAR:load%5b%5d";
-
-### URL
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update-core.php";
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update.php";
-BasicRule wl:1000 "mz:$URL:/wp-includes/js/imgareaselect/imgareaselect.css|URL";
-BasicRule wl:1002 "mz:$URL_X:/wp-content/uploads/[0-9]{4}/[0-9]{2}/[^/]+\.jpg$|URL";
-# URL|ARGS
-BasicRule wl:1015 "mz:$URL:/wp-admin/load-styles.php|$ARGS_VAR:dashicons,admin-bar,wp-admin,buttons,wp-auth-check";
-BasicRule wl:1000 "mz:$URL:/wp-admin/about.php|$ARGS_VAR:updated";
-BasicRule wl:1009 "mz:$URL:/wp-admin/customize.php|$ARGS_VAR:return";
-# URL|BODY
-BasicRule wl:1009,1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_http_referer";
-BasicRule wl:1016 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect";
-BasicRule wl:11 "mz:$URL:/xmlrpc.php|BODY";
-BasicRule wl:11,16 "mz:$URL:/wp-cron.php|BODY";
-BasicRule wl:2 "mz:$URL:/wp-admin/async-upload.php|BODY";
-# URL|BODY|NAME
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_original_http_referer|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/user-edit.php|$BODY_VAR:from|NAME";
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:attachment%5burl%5d|NAME";
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:attachment_url|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/plugins.php|$BODY_VAR:verify-delete|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:post_category[]|NAME";
-BasicRule wl:1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:post_category|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:tax_input[post_tag]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/post.php|$BODY_VAR:newtag[post_tag]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/users.php|$BODY_VAR:users[]|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/update-core.php|$BODY_VAR:Update%2BTranslations|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/update-core.php|$BODY_VAR:Update%2BNow|NAME";
-# URL|ARGS|NAME
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/load-scripts.php|$ARGS_VAR:load[]|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:delete_count|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:update|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/customize.php|$ARGS_VAR:autofocus[control]|NAME";
-
-# plain WP site
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update-core.php";
-BasicRule wl:1000 "mz:URL|$URL:/wp-admin/update.php";
-# URL|BODY
-BasicRule wl:1009,1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_http_referer";
-BasicRule wl:1016 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect";
-BasicRule wl:11 "mz:$URL:/xmlrpc.php|BODY";
-BasicRule wl:11,16 "mz:$URL:/wp-cron.php|BODY";
-# URL|BODY|NAME
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/post.php|$BODY_VAR:_wp_original_http_referer|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/post.php|$BODY_VAR:metakeyselect|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/user-edit.php|$BODY_VAR:from|NAME";
-BasicRule wl:1100,1101 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:attachment%5burl%5d|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-auth-check]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-check-locked-posts][]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-refresh-post-lock][post_id]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/admin-ajax.php|$BODY_VAR:data[wp-refresh-post-lock][lock]|NAME";
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/update-core.php|$BODY_VAR:checked[]|NAME";
-# URL|ARGS|NAME
-BasicRule wl:1310,1311 "mz:$URL:/wp-admin/load-scripts.php|$ARGS_VAR:load[]|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:delete_count|NAME";
-BasicRule wl:1000 "mz:$URL:/wp-admin/users.php|$ARGS_VAR:update|NAME";
-
-### Plugins
-#WP Minify
-BasicRule wl:1015 "mz:$URL:/wp-content/plugins/bwp-minify/min/|$ARGS_VAR:f";
-#Jetpack Infinite Scroll
-BasicRule wl:1310,1311 "mz:$BODY_VAR:scripts[]|NAME";
-BasicRule wl:1310,1311 "mz:$BODY_VAR:styles[]|NAME";
-BasicRule wl:1310,1311 "mz:$BODY_VAR_X:^query_args\[.*\]|NAME";
-BasicRule wl:1000 "mz:$BODY_VAR:query_args[update_post_term_cache]|NAME";
-BasicRule wl:1000 "mz:$BODY_VAR:query_args[update_post_meta_cache]|NAME";
-#UpdraftPlus
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/updraftplus/includes/select2/select2.min.css|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/updraftplus/includes/select2/select2.min.js|URL";
-#WP plugin updates
-BasicRule wl:1315 "mz:$ARGS_VAR:query|$URL:/wp-json/jetpack/v4/jitm";
-#Jetpack Google Fonts
-BasicRule wl:1001 "mz:$URL_X:^/wp-content/plugins/jetpack/css/.*|URL";
-#WooCommerce
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/woocommerce/assets/js/select2/select2.full.min.js|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/woocommerce/assets/js/selectWoo/selectWoo.full.min.js|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/woocommerce/assets/js/stupidtable/stupidtable.min.js|URL";
-#WPML
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/sitepress-multilingual-cms/lib/select2/select2.min.js|URL";
-#Yoast SEO
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/wordpress-seo/js/dist/select2/select2.full.min.js|URL";
-BasicRule wl:1000 "mz:$URL:/wp-content/plugins/wordpress-seo/css/dist/select2/select2.min.css|URL";
--- a/containers/conf/angie/naxsi_rules/whitelists/zerobin.rules
+++ b/containers/conf/angie/naxsi_rules/whitelists/zerobin.rules
@ -1,8 +0,0 @@
-# Zerobin is here in directory /paste if diffrent change $URL:/paste/ below
-BasicRule wl:1015 "mz:$URL:/paste/|$BODY_VAR:data";
-BasicRule wl:1315 "mz:$URL:/paste/|$HEADERS_VAR:cookie";
-BasicRule wl:1001 "mz:$URL:/paste/|$BODY_VAR:data";
-BasicRule wl:1009 "mz:$URL:/paste/|$BODY_VAR:data";
-BasicRule wl:1009 "mz:$URL:/paste/|$BODY_VAR:nickname";
-BasicRule wl:1001 "mz:$URL:/paste/|$BODY_VAR:nickname";
-BasicRule wl:1015 "mz:$URL:/paste/|$BODY_VAR:nickname";
--- a/containers/conf/angie/sites-available/default
+++ b/containers/conf/angie/sites-available/default
@ -1,20 +0,0 @@
-server {
-    listen 80 default_server backlog=2048 reuseport fastopen=256;
-    listen [::]:80 default_server backlog=2048 reuseport fastopen=256;
-
-    # redirect all http traffic to https
-    #return 301 https://$host$request_uri;
-
-    # Reject everything on your default IP
-    location / { return 444; }
-}
-
-server {
-    listen 443 ssl reuseport fastopen=256 backlog=2048;
-    listen [::]:443 ssl reuseport fastopen=256 backlog=2048;
-
-    # Reject everything on your default IP
-    location / { return 444; }
-
-    ssl_reject_handshake on;
-}
--- a/containers/conf/angie/sites-available/example
+++ b/containers/conf/angie/sites-available/example
@ -1,91 +0,0 @@
-##
-# You should look at the following URL's in order to grasp a solid understanding
-# of angie configuration files in order to fully unleash the power of angie.
-# https://www.angie.com/resources/wiki/start/
-# https://www.angie.com/resources/wiki/start/topics/tutorials/config_pitfalls/
-# https://wiki.debian.org/angie/DirectoryStructure
-#
-# In most cases, administrators will remove this file from sites-enabled/ and
-# leave it as reference inside of sites-available where it will continue to be
-# updated by the angie packaging team.
-#
-# This file will automatically load configuration files provided by other
-# applications, such as Drupal or Wordpress. These applications will be made
-# available underneath a path with that package name, such as /drupal8.
-#
-# Please see /usr/share/doc/angie-doc/examples/ for more detailed examples.
-##
-
-# Default server configuration
-#
-server {
-	listen 80 default_server;
-	listen [::]:80 default_server;
-
-	# SSL configuration
-	#
-	# listen 443 ssl default_server;
-	# listen [::]:443 ssl default_server;
-	#
-	# Note: You should disable gzip for SSL traffic.
-	# See: https://bugs.debian.org/773332
-	#
-	# Read up on ssl_ciphers to ensure a secure configuration.
-	# See: https://bugs.debian.org/765782
-	#
-	# Self signed certs generated by the ssl-cert package
-	# Don't use them in a production server!
-	#
-	# include snippets/snakeoil.conf;
-
-	root /var/www/html;
-
-	# Add index.php to the list if you are using PHP
-	index index.html index.htm index.angie-debian.html;
-
-	server_name _;
-
-	location / {
-		# First attempt to serve request as file, then
-		# as directory, then fall back to displaying a 404.
-		try_files $uri $uri/ =404;
-	}
-
-	# pass PHP scripts to FastCGI server
-	#
-	#location ~ \.php$ {
-	#	include snippets/fastcgi-php.conf;
-	#
-	#	# With php-fpm (or other unix sockets):
-	#	fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
-	#	# With php-cgi (or other tcp sockets):
-	#	fastcgi_pass 127.0.0.1:9000;
-	#}
-
-	# deny access to .htaccess files, if Apache's document root
-	# concurs with angie's one
-	#
-	#location ~ /\.ht {
-	#	deny all;
-	#}
-}
-
-
-# Virtual Host configuration for example.com
-#
-# You can move that to a different file under sites-available/ and symlink that
-# to sites-enabled/ to enable it.
-#
-#server {
-#	listen 80;
-#	listen [::]:80;
-#
-#	server_name example.com;
-#
-#	root /var/www/example.com;
-#	index index.html;
-#
-#	location / {
-#		try_files $uri $uri/ =404;
-#	}
-#}
--- a/containers/conf/php.ini
+++ b/containers/conf/php.ini
@ -1,18 +1,14 @@
-allow_url_fopen=Off
-allow_url_include=Off
-cgi.fix_pathinfo=Off
-display_errors=On
-display_startup_errors=On
-expose_php=Off
-file_uploads=On
-html_errors=On
-error_prepend_string="<pre style='white-space: preserve'>"
-error_append_string="</pre>"
-max_execution_time=600
-max_input_time=600
-max_input_vars=2000
-memory_limit=1024M
-open_basedir="/"
-post_max_size=32M
-register_globals=Off
-upload_max_filesize=32M
+allow_url_fopen = 0
+allow_url_include = 0
+cgi.fix_pathinfo = 0
+display_errors = 0
+display_startup_errors = 0
+expose_php = 0
+file_uploads = On
+max_execution_time = 600
+max_input_time = 600
+max_input_vars = 2000
+memory_limit = 1024M
+post_max_size = 32M
+register_globals = Off
+upload_max_filesize = 32M
--- a/cspell.json
+++ b/cspell.json
@ -1,52 +1,48 @@
 {
-  "dictionaries": [
-    "en-gb",
-    "fr-fr"
-  ],
+  "dictionaries": ["fr-fr", "en-gb"],
  "userWords": [
-    "codesniffer",
-    "curryfication",
-    "eilandert",
-    "ERRMODE",
-    "gcch",
-    "giftcard",
+    "lightningcss",
    "haikuatelier",
    "healthcheck",
+    "traefik",
    "innodb",
    "jaegertracing",
-    "laravel",
-    "lightningcss",
-    "multiformats",
-    "multishipping",
-    "muplugin",
-    "phpactor",
-    "phpstan",
-    "somaxconn",
-    "Squiz",
-    "symfony",
-    "taplo",
-    "traefik",
-    "twentytwentyfour",
+    "eilandert",
    "valkey",
+    "somaxconn",
    "woocommerce",
-    "wpautop"
+    "Squiz",
+    "twentytwentyfour",
+    "symfony",
+    "phpstan",
+    "codesniffer",
+    "muplugin",
+    "wpautop",
+    "ERRMODE",
+    "laravel",
+    "multishipping",
+    "multiformats",
+    "curryfication",
+    "giftcard",
+    "taplo",
+    "phpactor"
  ],
  "words": [
-    "classlike",
-    "Crell",
-    "Eles",
-    "fdir",
-    "friendsofphp",
    "GLITCHTIP",
-    "htmlburger",
-    "logtape",
+    "Vali",
+    "fdir",
    "mobily",
    "oxlint",
-    "phpdotenv",
-    "Vali",
    "valibot",
+    "zstandard",
+    "Eles",
+    "logtape",
    "wpackagist",
+    "phpdotenv",
+    "friendsofphp",
+    "htmlburger",
+    "Crell",
    "wpdb",
-    "zstandard"
+    "classlike"
  ]
 }
--- a/docs/JOURNAL.md
+++ b/docs/JOURNAL.md
@ -1,9 +1,5 @@
 # Journal de développement

-## 2026-01-09
-
- Faire un modèle _Twig_ pour l'injection de données _JSON_ dans le _HTML_ d'une page.
-
 ## 2025-06-13

 ### Informations produit sous forme de grille
--- a/docs/TESTS.md
+++ b/docs/TESTS.md
@ -1,6 +0,0 @@
- Produits
-  - Aller sur tous les Produits
-    - La page doit correctement se charger
-    - Il est possible d'ajouter chaque variation au Panier
-    - Il n'est pas possible d'ajouter un Produit sans stock au Panier
-    - Le backend renvoie une erreur quand une demande d'ajout au Panier pour un Produit sans stock est malgré tout effectuée
--- a/docs/TODO.md
+++ b/docs/TODO.md
@ -1,9 +1,3 @@
-## 2026-02-19
-
- Créer un _timer_ et _service_ `systemd` adossés à un script réalisant un export de la BDD de production du site Haiku toutes les semaines dans le dossier `db` du répertoire.
-
---
-
 - PAGE PANIER
  - [-] Bouton « Réinitialiser » pour les Articles
  - [-] Bouton « Réinitialiser » pour les Adresses
--- a/docs/lol/cute.ts
+++ b/docs/lol/cute.ts
@ -1,5 +1,12 @@
-const etapes = ["┌(・ω・)┘", "└(・ω・)┐", "┌(;・ω・)┘", "└(;・ω・)┐", "┌(;・ω・;)┘", "└(;・ω・;)┐"];
-const assigneTexte = (texte: string): void => (ELEMENTS.BOUTON_CODE_PROMO.textContent = texte);
+const etapes = [
+  "┌(・ω・)┘",
+  "└(・ω・)┐",
+  "┌(;・ω・)┘",
+  "└(;・ω・)┐",
+  "┌(;・ω・;)┘",
+  "└(;・ω・;)┐",
+];
+const assigneTexte = (texte: string): void => ELEMENTS.BOUTON_CODE_PROMO.textContent = texte;
 let index = 0;
 const z = {};
 const callback = () => {
--- a/dprint.json
+++ b/dprint.json
@ -0,0 +1,122 @@
+{
+  "excludes": [
+    "**/node_modules",
+    "**/pnpm-lock.yaml",
+    "./lib/",
+    "web/app/languages",
+    "web/app/plugins",
+    "web/app/themes/haiku-atelier-2024/assets",
+    "web/vendor"
+  ],
+  "exec": {
+    "cacheKey": "1",
+    "commands": [
+      { "command": "prettier --ignore-unknown --write --stdin-filepath {{file_path}}", "exts": ["xml"] },
+      { "command": "just --dump", "fileNames": ["justfile"], "stdin": true }
+    ],
+    "cwd": "${originConfigDir}",
+    "indentWidth": 2,
+    "lineWidth": 120,
+    "timeout": 30,
+    "useTabs": false
+  },
+  "indentWidth": 2,
+  "json": {
+    "commentLine.forceSpaceAfterSlashes": true,
+    "indentWidth": 2,
+    "jsonTrailingCommaFiles": [".swcrc", "biome.jsonc", "settings.json", "tsconfig.json"],
+    "lineWidth": 120,
+    "newLineKind": "lf",
+    "preferSingleLine": true,
+    "trailingCommas": "never",
+    "useTabs": false
+  },
+  "lineWidth": 120,
+  "malva": {
+    "alignComments": true,
+    "attrValueQuotes": "always",
+    "blockSelectorLinebreak": "wrap",
+    "declarationOrder": null,
+    "formatComments": true,
+    "hexCase": "lower",
+    "hexColorLength": "short",
+    "indentWidth": 2,
+    "keyframeSelectorNotation": "keyword",
+    "lineBreak": "lf",
+    "linebreakInPseudoParens": true,
+    "omitNumberLeadingZero": false,
+    "operatorLinebreak": "before",
+    "preferSingleLine": true,
+    "printWidth": 100,
+    "quotes": "alwaysDouble",
+    "singleLineBlockThreshold": null,
+    "singleLineTopLevelDeclarations": false,
+    "trailingComma": false,
+    "useTabs": false
+  },
+  "markup": {
+    "closingBracketSameLine": false,
+    "closingTagLineBreakForEmpty": "never",
+    "component.selfClosing": false,
+    "doctypeKeywordCase": "lower",
+    "formatComments": true,
+    "html.normal.selfClosing": false,
+    "html.void.selfClosing": false,
+    "indentWidth": 2,
+    "lineBreak": "lf",
+    "maxAttrsPerLine": 1,
+    "printWidth": 120,
+    "quotes": "double",
+    "scriptFormatter": "dprint",
+    "scriptIndent": true,
+    "styleIndent": true,
+    "svg.selfClosing": true,
+    "useTabs": false,
+    "whitespaceSensitivity": "strict"
+  },
+  "newLineKind": "lf",
+  "plugins": [
+    "https://plugins.dprint.dev/typescript-0.95.13.wasm",
+    "https://plugins.dprint.dev/json-0.21.0.wasm",
+    "https://plugins.dprint.dev/markdown-0.20.0.wasm",
+    "https://plugins.dprint.dev/toml-0.7.0.wasm",
+    "https://plugins.dprint.dev/g-plane/malva-v0.15.1.wasm",
+    "https://plugins.dprint.dev/g-plane/markup_fmt-v0.25.3.wasm",
+    "https://plugins.dprint.dev/g-plane/pretty_yaml-v0.5.1.wasm",
+    "https://plugins.dprint.dev/exec-0.6.0.json@a054130d458f124f9b5c91484833828950723a5af3f8ff2bd1523bd47b83b364"
+  ],
+  "toml": {
+    "cargo.applyConventions": true,
+    "comment.forceLeadingSpace": true,
+    "indentWidth": 2,
+    "lineWidth": 120,
+    "newLineKind": "lf",
+    "useTabs": false
+  },
+  "typescript": {
+    "arrowFunction.useParentheses": "preferNone",
+    "conditionalExpression.operatorPosition": "nextLine",
+    "conditionalExpression.preferSingleLine": true,
+    "exportDeclaration.sortNamedExports": "maintain",
+    "importDeclaration.sortNamedImports": "maintain",
+    "module.sortExportDeclarations": "maintain",
+    "module.sortImportDeclarations": "maintain",
+    "quoteProps": "asNeeded",
+    "trailingCommas": "onlyMultiLine",
+    "useBraces": "whenNotSingleLine"
+  },
+  "yaml": {
+    "braceSpacing": true,
+    "bracketSpacing": false,
+    "formatComments": true,
+    "indentBlockSequenceInMap": true,
+    "indentWidth": 2,
+    "lineBreak": "lf",
+    "preferSingleLine": false,
+    "printWidth": 120,
+    "quotes": "preferDouble",
+    "trailingComma": true,
+    "trimTrailingWhitespaces": true,
+    "trimTrailingZero": false
+  }
+}
--- a/eslint.config.js
+++ b/eslint.config.js
@ -0,0 +1,61 @@
+import js from "@eslint/js";
+import oxlint from "eslint-plugin-oxlint";
+import perfectionist from "eslint-plugin-perfectionist";
+import globals from "globals";
+import tseslint from "typescript-eslint";
+
+export default tseslint.config(
+  js.configs.recommended,
+  perfectionist.configs["recommended-natural"],
+  ...tseslint.configs.strictTypeChecked,
+  ...tseslint.configs.stylisticTypeChecked,
+  oxlint.configs["flat/recommended"],
+  {
+    files: ["*.js", "web/app/themes/haiku-atelier-2024/src/**/*.ts"],
+    languageOptions: {
+      ecmaVersion: "latest",
+      globals: {
+        ...globals.browser,
+        ...globals.es2020,
+      },
+      parserOptions: {
+        projectService: true,
+        tsconfigRootDir: import.meta.dirname,
+      },
+    },
+    rules: {
+      /* Utilise Array<T> plutôt que T[]. */
+      "@typescript-eslint/array-type": [
+        "error",
+        {
+          default: "generic",
+          readonly: "generic",
+        },
+      ],
+      /* L'usage d'interfaces ou de types doit être à la discrétion du développeur. */
+      "@typescript-eslint/consistent-type-definitions": "off",
+      /* Désactive cette règle pour les fonctions fléchées pour rendre le code moins verbeux. */
+      "@typescript-eslint/no-confusing-void-expression": [
+        "error",
+        {
+          ignoreArrowShorthand: true,
+          ignoreVoidOperator: false,
+        },
+      ],
+      /* Chiant avec certaines Promises. */
+      "@typescript-eslint/no-misused-promises": "off",
+      /* Cette règle empêche l'usage de génériques précisant les types de retour de fonctions. */
+      "@typescript-eslint/no-unnecessary-type-parameters": "off",
+      // Pour utiliser LogTape.
+      "@typescript-eslint/no-unused-expressions": "off",
+      /* Cette règle est doublon avec les règles noUnused* de TypeScript. */
+      "@typescript-eslint/no-unused-vars": "off",
+      /* Cette règle empêche de lever des erreurs génériques (p.ex. `E extends Error`). */
+      "@typescript-eslint/only-throw-error": "off",
+      /* Cette règle empêche le style fonctionnel « point free ». */
+      "@typescript-eslint/unbound-method": "off",
+      /* Cette règle interdit l'usage de fonctions vides sauf pour les fonctions fléchées. */
+      "no-empty-function": ["error", { allow: ["arrowFunctions"] }],
+    },
+  },
+);
--- a/105
+++ b/105
@ -1,7 +1,11 @@
 set shell := ["fish", "-c"]
+set unstable
+
+cacheFolder := ".cache"
+prettierCacheFile := "prettiercache"

 # Recette par défaut.
-default: build-all
+default: dev

 # Liste toutes les recettes
 list:
@ -12,69 +16,64 @@ list:
 [group('php')]
 update:
    composer update
-    aube update
+    bun update

-# Formatte avec treefmt.
-[group('qualité')]
-treefmt:
-    treefmt --config-file ~/.config/treefmt/treefmt.toml .
-
-# Formatte avec Prettier et treefmt.
+# Formatte avec Prettier et dprint.
 [group('qualité')]
 format:
-    aube x prettier \
-      --cache --cache-location ".cache/prettiercache" \
-      --config "cfg/prettier.config.ts" \
-      --ignore-path "cfg/prettierignore" \
-      --ignore-unknown \
-      --parallel-workers 8 \
-      --write .
+    bun prettier \
+        --cache \
+        --cache-location "{{ cacheFolder }}/{{ prettierCacheFile }}" \
+        --ignore-unknown \
+        --parallel-workers 8 \
+        --write \
+        .
+    dprint fmt
    # TwigCsFixher
    -vendor/bin/twig-cs-fixer fix web/app/themes/haiku-atelier-2024/
+    # Mago
+    mago fmt
    # PhpCsFixer
-    # -vendor/bin/php-cs-fixer fix --allow-risky yes
-    treefmt \
-      --config-file ~/.config/treefmt/treefmt.toml \
-      --tree-root . \
-      .
+    -vendor/bin/php-cs-fixer fix --allow-risky yes
+    fish scripts/format-sort-files.fish

 # Compile, minifie et optimise Sass vers CSS.
 [group('css')]
 build-css:
-    @aube x sass \
+    @bun sass \
        --update \
        "web/app/themes/haiku-atelier-2024/src/sass":"web/app/themes/haiku-atelier-2024/assets/css"
-    @aube x lightningcss \
+    @bun lightningcss \
        --bundle \
        --minify \
        --output-file "web/app/themes/haiku-atelier-2024/assets/css/main.min.css" \
        -- "web/app/themes/haiku-atelier-2024/assets/css/main.css"
-    @aube x lightningcss \
+    @bun lightningcss \
        --bundle \
        --minify \
        --output-file "web/app/themes/haiku-atelier-2024/assets/css/pages/page-panier.min.css" \
        -- "web/app/themes/haiku-atelier-2024/assets/css/pages/page-panier.css"
-    @aube x lightningcss \
+    @bun lightningcss \
        --bundle \
        --minify \
        --output-file "web/app/themes/haiku-atelier-2024/assets/css/pages/page-accueil.min.css" \
        -- "web/app/themes/haiku-atelier-2024/assets/css/pages/page-accueil.css"
-    @aube x lightningcss \
+    @bun lightningcss \
        --bundle \
        --minify \
        --output-file "web/app/themes/haiku-atelier-2024/assets/css/pages/page-boutique.min.css" \
        -- "web/app/themes/haiku-atelier-2024/assets/css/pages/page-boutique.css"
-    @aube x lightningcss \
+    @bun lightningcss \
        --bundle \
        --minify \
        --output-file "web/app/themes/haiku-atelier-2024/assets/css/pages/page-a-propos.min.css" \
        -- "web/app/themes/haiku-atelier-2024/assets/css/pages/page-a-propos.css"
-    @aube x lightningcss \
+    @bun lightningcss \
        --bundle \
        --minify \
        --output-file "web/app/themes/haiku-atelier-2024/assets/css/pages/page-modele-simple.min.css" \
        -- "web/app/themes/haiku-atelier-2024/assets/css/pages/page-modele-simple.css"
-    @aube x lightningcss \
+    @bun lightningcss \
      --bundle \
      --minify \
      --output-file "web/app/themes/haiku-atelier-2024/assets/css/pages/page-succes-commande.min.css" \
@ -88,12 +87,7 @@ watch-css:
 # Compile TypeScript en JavaScript.
 [group('js')]
 build-js:
-    aube x vite build --config "cfg/vite.config.ts"
-
-# Compile TypeScript à chaque changement de fichier.
-[group('js')]
-watch-js:
-    @watchexec -w "web/app/themes/haiku-atelier-2024/src/scripts" -w "web/app/themes/haiku-atelier-2024/src/scripts-effect" -- just build-js treefmt
+    @bun vite build

 # Compile tout.
 [group('css')]
@ -103,32 +97,30 @@ build-all:
    @just build-js
    @just format

+# Compile TypeScript à chaque changement de fichier.
+[group('js')]
+watch-js:
+    bun vite build --watch
+
 # Vérifie le code TypeScript avec des analyseurs statiques.
 [group('js')]
 [group('qualité')]
 lint-js:
-    -aube x eslint "web/app/themes/haiku-atelier-2024/src/scripts"
-    -aube x oxlint \
-    --config cfg/oxlint.config.ts \
-    --format stylish
-
-fix-js:
-    aube x oxlint \
-    --config cfg/oxlint.config.ts \
-    --format stylish \
-    --fix --fix-suggestions --fix-dangerously
+    -bun eslint "web/app/themes/haiku-atelier-2024/src/scripts"
+    -bun biome check --reporter=summary "web/app/themes/haiku-atelier-2024/src/scripts"
+    -bun oxlint "web/app/themes/haiku-atelier-2024/src/scripts"

 # Vérifie le code Sass avec Stylelint.
 [group('css')]
 [group('qualité')]
 lint-css:
-    -aube x stylelint --config "cfg/stylelint.config.ts" "web/app/themes/haiku-atelier-2024/src/sass/" --fix
+    -bun stylelint "web/app/themes/haiku-atelier-2024/src/sass/" --fix

 # Vérifie le code TypeScript mort avec knip
 [group('js')]
 [group('qualité')]
 lint-code-mort:
-    -aube x knip
+    -bun knip

 # Fusionne tous les changements actuels dans le commit précédent et pousse sur le répertoire distant avec Jujetsu.
 [group('vcs')]
@ -143,6 +135,19 @@ lint-build-format-css:
    -just build-css
    -just format

+# Lance un navigateur de développement.
+[group('développement')]
+dev:
+    @/opt/cromite/chrome --remote-debugging-address=127.0.0.1 --remote-debugging-port=9222 --profile-directory=Guest "https://haikuatelier.gcch.local" &
+
+# Recharge le premier onglet du navigateur de développement.
+[group('développement')]
+reload-tab:
+    #!/usr/bin/fish
+    set -f WSURL (curl -s http://127.1:9222/json | fx '.[0].webSocketDebuggerUrl')
+    set -f REQUEST '{ "id": 2, "method": "Page.reload", "params": { "ignoreCache": true, "scriptToEvaluateOnLoad": "" } }'
+    echo $REQUEST | websocat $WSURL
+
 # Créé l'image OCI.
 [group('container')]
 build-wordpress-container:
@ -166,10 +171,4 @@ restart-services:
 # Met à jour les conteneurs images des conteneurs.
 [group('container')]
 pull-images:
-    bun run "scripts/pull-container-images.ts"
-
-export_production_db:
-    fish "scripts/déclenche-sauvegarde-bdd-production.fish"
-
-ui_tests:
-    aube x playwright test --config cfg/playwright.config.ts --ui
+    bun "scripts/pull-container-images.ts"
--- a/lib/openapi3_1.json
+++ b/lib/openapi3_1.json
--- a/lib/stylelint.d.ts
+++ b/lib/stylelint.d.ts
@ -0,0 +1,8 @@
+/**
+ * Définition d'un groupe de Propriétés _CSS_ du plugin `stylelint-config-clean-order` pour _Stylelint_.
+ */
+export type stylelintconfigcleanorderpropertygroup = {
+  emptyLineBefore: "never" | "threshold";
+  noEmptyLineBetween: boolean;
+  properties: string | array<string>;
+};
--- a/lib/wp-json-openapi.json
+++ b/lib/wp-json-openapi.json
--- a/lib/wp-json-schema.json
+++ b/lib/wp-json-schema.json
--- a/mago-schema.json
+++ b/mago-schema.json
--- a/mago.toml
+++ b/mago.toml
@ -1,80 +1,108 @@
-#:schema mago-schema.json
-
 php-version = "8.5"
-stack-size  = 0
-threads     = 0
+stack-size = 8388608
+threads = 8

 [source]
-  excludes   = [
-    "web/wp/wp-admin/includes/noop.php",
-  ]
-  extensions = ["php"]
-  includes   = ["config", "vendor", "web/app/plugins", "web/vendor", "web/wp"]
-  paths      = ["web/app/themes/haiku-atelier-2024"]
-  workspace  = "."
-
-[linter]
-  integrations = ["wordpress"]
-
-  [linter.rules]
-    ambiguous-function-call         = { enabled = true }
-    array-style                     = { enabled = true, style = "short" }
-    halstead                        = { effort-threshold = 7000 }
-    literal-named-argument          = { enabled = false }
-    missing-docs                    = { enabled = true }
-    no-array-accumulation-in-loop   = { enabled = true }
-    no-inline                       = { enabled = true }
-    no-is-null                      = { enabled = true }
-    no-iterator-to-array-in-foreach = { enabled = true }
-    no-parameter-shadowing          = { enabled = true }
-    no-redundant-readonly           = { enabled = true }
-    no-redundant-use                = { enabled = true }
-    no-variable-variable            = { enabled = true }
-    require-namespace               = { enabled = true }
-    sorted-integer-keys             = { enabled = true }
-    # Les else permettent de conserver les branches d'une condition à la même indentation.
-    no-else-clause                  = { enabled = false }
-
-[analyzer]
-  allow-implicit-pipe-callable-types      = false
-  allow-possibly-undefined-array-keys     = false
-  allow-side-effects-in-conditions        = true
-  analyze-dead-code                       = true
-  check-arrow-function-missing-type-hints = true
-  check-closure-missing-type-hints        = true
-  check-experimental                      = true
-  check-missing-override                  = true
-  check-missing-type-hints                = true
-  check-name-casing                       = true
-  check-property-initialization           = true
-  check-throws                            = true
-  check-use-statements                    = true
-  enforce-class-finality                  = true
-  find-overly-wide-return-types           = true
-  find-unused-definitions                 = true
-  find-unused-expressions                 = true
-  find-unused-parameters                  = true
-  memoize-properties                      = true
-  no-boolean-literal-comparison           = false
-  perform-heuristic-checks                = true
-  plugins                                 = ["psl"]
-  require-api-or-internal                 = true
-  strict-list-index-checks                = true
-  trust-existence-checks                  = false
-
-  [analyzer.performance]
-    array-combination-threshold      = 256
-    consensus-limit-threshold        = 512
-    disjunction-complexity-threshold = 8192
-    formula-size-threshold           = 1024
-    integer-combination-threshold    = 256
-    loop-assignment-depth-threshold  = 2
-    negation-complexity-threshold    = 8192
-    saturation-complexity-threshold  = 16384
-    string-combination-threshold     = 256
+excludes = ["web/wp/wp-admin/includes/noop.php"]
+extensions = ["php"]
+includes = ["config", "vendor", "web/app/plugins", "web/vendor", "web/wp"]
+paths = ["web/app/themes/haiku-atelier-2024"]

 [formatter]
-  excludes = [
-    "web/app/mu-plugins",
-    "web/app/plugins",
-  ]
+# Brace style for classes, traits, etc.
+classlike-brace-style = "same_line"
+# Brace style for closures.
+closure-brace-style = "same_line"
+# Brace style for control structures.
+control-brace-style = "same_line"
+# Brace style for functions.
+function-brace-style = "same_line"
+# Brace style for methods.
+method-brace-style = "same_line"
+# Maximum line length that the printer will wrap on.
+print-width = 120
+# Remove the trailing PHP close tag (?>) from files.
+remove-trailing-close-tag = true
+# Prefer single quotes over double quotes for strings.
+single-quote = true
+# Number of spaces per indentation level.
+tab-width = 4
+# Add a trailing comma to multi-line arrays, parameter lists, etc.
+trailing-comma = true
+# Use tabs instead of spaces for indentation.
+use-tabs = false
+# Place empty control structure bodies on the same line.
+inline-empty-control-braces = true
+# Place empty function bodies on the same line.
+inline-empty-function-braces = true
+# Place empty constructor bodies on the same line.
+inline-empty-constructor-braces = true
+# Place empty method bodies on the same line.
+inline-empty-method-braces = true
+# Place empty anonymous class bodies on the same line.
+inline-empty-anonymous-class-braces = true
+# How to break method chains.
+method-chain-breaking-style = "next_line"
+# Preserve existing line breaks in method chains.
+preserve-breaking-member-access-chain = false
+# Preserve existing line breaks in argument lists.
+preserve-breaking-argument-list = false
+# Preserve existing line breaks in array-like structures.
+preserve-breaking-array-like = false
+# Preserve existing line breaks in parameter lists.
+preserve-breaking-parameter-list = false
+# Preserve existing line breaks in attribute lists.
+preserve-breaking-attribute-list = false
+# Preserve existing line breaks in ternary expressions.
+preserve-breaking-conditional-expression = false
+# Always break parameter lists with promoted properties.
+break-promoted-properties-list = true
+# Place the binary operator on the next line when breaking.
+line-before-binary-operator = true
+# Always break named argument lists into multiple lines.
+always-break-named-arguments-list = true
+# Always break named argument lists in attributes.
+always-break-attribute-named-argument-lists = true
+# Use table-style alignment for arrays.
+array-table-style-alignment = true
+# Sort use statements alphabetically.
+sort-uses = true
+# Insert a blank line between different types of use statements.
+separate-use-types = true
+# Expand grouped use statements into individual statements.
+expand-use-groups = true
+# How to format null type hints (null|T vs ?T).
+null-type-hint = "null_pipe"
+# Add parentheses around new in member access ((new Foo)->bar()).
+parentheses-around-new-in-member-access = false
+# Add parentheses to new expressions without arguments (new Foo()).
+parentheses-in-new-expression = true
+# Add parentheses to exit and die constructs.
+parentheses-in-exit-and-die = true
+# Add parentheses to attributes without arguments.
+parentheses-in-attribute = true
+# Add a space before arrow function parameters.
+space-before-arrow-function-parameter-list-parenthesis = false
+
+[linter]
+integrations = ["wordpress"]
+
+[linter.rules]
+ambiguous-function-call = { enabled = true }
+halstead = { effort-threshold = 7000 }
+literal-named-argument = { enabled = false }
+no-redundant-readonly = { enabled = true }
+no-redundant-use = { enabled = true }
+no-variable-variable = { enabled = true }
+
+[analyzer]
+allow-possibly-undefined-array-keys = true
+analyze-dead-code = true
+check-arrow-function-missing-type-hints = true
+check-closure-missing-type-hints = true
+check-missing-type-hints = true
+check-throws = true
+find-unused-definitions = true
+find-unused-expressions = true
+perform-heuristic-checks = true
+strict-list-index-checks = true
--- a/mise.toml
+++ b/mise.toml
@ -1,2 +1,2 @@
 [tools]
-  "github:AJenbo/phpantom_lsp" = "latest"
+"cargo:mago" = "latest"
--- a/package.json
+++ b/package.json
@ -7,68 +7,63 @@
  "license": "ISC",
  "main": "index.js",
  "keywords": [],
-  "scripts": {
-    "knip": "knip",
-    "prepare": "effect-tsgo patch"
-  },
+  "scripts": { "knip": "knip" },
  "dependencies": {
+    "@effect/language-service": "^0.60.0",
+    "@logtape/logtape": "^1.2.2",
    "@mobily/ts-belt": "v4.0.0-rc.5",
-    "@sentry/browser": "^10.51.0",
-    "a11y-dialog": "^8.1.5",
-    "effect": "^4.0.0-beta.59",
-    "html-template-tag": "^5.0.0",
-    "lit-html": "^3.3.2",
+    "@sentry/browser": "^10.29.0",
+    "a11y-dialog": "^8.1.4",
+    "chalk": "^5.6.2",
+    "effect": "^3.19.9",
+    "lit-html": "^3.3.1",
+    "loglevel": "^1.9.2",
+    "loglevel-plugin-prefix": "^0.8.4",
+    "optics-ts": "^2.4.1",
    "purify-ts": "2.1.2",
    "ts-pattern": "^5.9.0",
    "valibot": "1.1.0"
  },
  "devDependencies": {
-    "@effect/language-service": "^0.85.1",
-    "@effect/tsgo": "^0.5.2",
-    "@gcch/configuration-eslint": "git+https://git.gcch.fr/gcch/configuration-eslint#888eb4aa54",
-    "@gcch/configuration-oxlint": "git+https://git.gcch.fr/gcch/configuration-oxlint#83547fc1ebfd",
-    "@gcch/configuration-prettier": "git+https://git.gcch.fr/gcch/configuration-prettier#d267d6dc5e",
-    "@playwright/test": "^1.59.1",
-    "@sentry/core": "^10.51.0",
-    "@types/bun": "^1.3.13",
-    "@types/node": "^25.6.0",
-    "@typescript/native-preview": "7.0.0-dev.20260503.1",
-    "@vitejs/plugin-legacy": "^8.0.1",
+    "@biomejs/biome": "^2.3.8",
+    "@cspell/dict-fr-fr": "^2.3.2",
+    "@eslint/js": "^9.39.1",
+    "@playwright/test": "^1.57.0",
+    "@prettier/plugin-xml": "^3.4.2",
+    "@sentry/core": "^10.29.0",
+    "@swc/cli": "0.7.8",
+    "@types/eslint__js": "^9.14.0",
+    "@types/node": "^24.10.1",
+    "@vitejs/plugin-legacy": "^7.2.1",
    "better-typescript-lib": "^2.12.0",
-    "browserslist": "^4.28.2",
-    "caniuse-lite": "^1.0.30001791",
-    "eslint": "^10.3.0",
-    "eslint-plugin-functional": "^9.0.4",
-    "eslint-plugin-jsx-a11y": "^6.10.2",
-    "eslint-plugin-oxlint": "^1.62.0",
-    "eslint-plugin-perfectionist": "^5.9.0",
+    "browserslist": "^4.28.1",
+    "caniuse-lite": "^1.0.30001759",
+    "eslint": "^9.39.1",
+    "eslint-plugin-oxlint": "^1.31.0",
+    "eslint-plugin-perfectionist": "^4.15.1",
    "fdir": "^6.5.0",
-    "globals": "^17.6",
-    "jiti": "^2.6.1",
-    "knip": "^6.11.0",
-    "lightningcss": "^1.32.0",
-    "lightningcss-cli": "^1.32.0",
-    "oxlint": "^1.62.0",
-    "oxlint-tsgolint": "^0.22.1",
-    "playwright": "^1.59.1",
-    "prettier": "^3.8.3",
-    "prettier-plugin-curly": "^0.4.1",
-    "prettier-plugin-ini": "^1.3.0",
-    "prettier-plugin-jsdoc": "^1.8.0",
-    "prettier-plugin-pkg": "^0.22.1",
-    "prettier-plugin-sh": "^0.18.1",
-    "prettier-plugin-sort-json": "^4.2.0",
-    "sass-embedded": "^1.99.0",
-    "stylelint": "^17.9.1",
-    "stylelint-config-clean-order": "^8.0.1",
-    "stylelint-config-sass-guidelines": "^13.0.0",
-    "stylelint-config-standard-scss": "^17.0.0",
-    "stylelint-declaration-block-no-ignored-properties": "^3.0.0",
-    "stylelint-plugin-logical-css": "^2.1.0",
-    "typescript": "^6.0.3",
-    "typescript-eslint": "^8.59.1",
-    "vite": "^8.0.10",
-    "vite-tsconfig-paths": "^6.1.1"
+    "globals": "^16.5.0",
+    "knip": "^5.71.0",
+    "lightningcss-cli": "^1.30.2",
+    "oxlint": "^1.31.0",
+    "picomatch": "^4.0.3",
+    "playwright": "^1.57.0",
+    "prettier": "^4.0.0-alpha.13",
+    "prettier-plugin-pkg": "^0.21.2",
+    "prettier-plugin-sh": "^0.18.0",
+    "sass-embedded": "^1.93.3",
+    "stylelint": "^16.26.1",
+    "stylelint-config-clean-order": "^8.0.0",
+    "stylelint-config-sass-guidelines": "^12.1.0",
+    "stylelint-config-standard-scss": "^16.0.0",
+    "stylelint-declaration-block-no-ignored-properties": "^2.8.0",
+    "stylelint-plugin-logical-css": "^1.2.3",
+    "typescript": "5.9.3",
+    "typescript-eslint": "^8.48.1",
+    "vite": "^7.2.6",
+    "vite-plugin-valibot-env": "^1.0.1",
+    "vite-tsconfig-paths": "^5.1.4",
+    "wp-types": "^4.69.0"
  },
  "browserslist": [
    "chrome >0 and last 3 years",
@ -80,17 +75,8 @@
    "ios >0 and last 3 years"
  ],
  "knip": {
-    "entry": [
-      "web/app/themes/haiku-atelier-2024/src/scripts/*.ts"
-    ],
-    "project": [
-      "web/app/themes/haiku-atelier-2024/src/scripts/**/*.{js,ts,d.ts}"
-    ]
+    "entry": ["web/app/themes/haiku-atelier-2024/src/scripts/*.ts"],
+    "project": ["web/app/themes/haiku-atelier-2024/src/scripts/**/*.{js,ts,d.ts}"]
  },
-  "trustedDependencies": [
-    "@parcel/watcher",
-    "core-js",
-    "lightningcss-cli",
-    "msgpackr-extract"
-  ]
+  "trustedDependencies": ["@biomejs/biome", "@parcel/watcher", "@swc/core", "core-js", "esbuild", "lightningcss-cli"]
 }
--- a/phpactor.schema.json
+++ b/phpactor.schema.json
--- a/phpstan.neon
+++ b/phpstan.neon
@ -21,8 +21,6 @@ parameters:
    reportWrongPhpDocTypeInVarTag: true
    # Setting treatPhpDocTypesAsCertain to false relaxes some of the rules around type-checking.
    treatPhpDocTypesAsCertain: true
-    # PHP silently casts array keys that look like decimal integers from string to int. This means array<string, mixed> can’t guarantee that keys are actually strings at runtime.
-    reportUnsafeArrayStringKeyCasting: true

    parallel:
      jobSize: 20
--- a/playwright.config.ts
+++ b/playwright.config.ts
@ -0,0 +1,92 @@
+import { defineConfig, devices } from "@playwright/test";
+
+/**
+ * Read environment variables from file.
+ * https://github.com/motdotla/dotenv
+ */
+// import dotenv from 'dotenv';
+// import path from 'path';
+// dotenv.config({ path: path.resolve(__dirname, '.env') });
+
+/**
+ * See https://playwright.dev/docs/test-configuration.
+ */
+export default defineConfig({
+  testDir: "./tests",
+  /* Run tests in files in parallel */
+  fullyParallel: true,
+  /* Fail the build on CI if you accidentally left test.only in the source code. */
+  forbidOnly: !!process.env.CI,
+  /* Retry on CI only */
+  retries: process.env.CI ? 2 : 0,
+  /* Opt out of parallel tests on CI. */
+  workers: process.env.CI ? 1 : undefined,
+  /* Reporter to use. See https://playwright.dev/docs/test-reporters */
+  reporter: "list",
+  /* Shared settings for all the projects below. See https://playwright.dev/docs/api/class-testoptions. */
+  use: {
+    /* Base URL to use in actions like `await page.goto('/')`. */
+    // baseURL: 'http://localhost:3000',
+
+    /* Collect trace when retrying the failed test. See https://playwright.dev/docs/trace-viewer */
+    trace: "on-first-retry",
+    clientCertificates: [
+      {
+        origin: "https://haikuatelier.gcch.local",
+        certPath: "../certs/_wildcard.gcch.local.pem",
+        keyPath: "../certs/_wildcard.gcch.local-key.pem",
+      },
+    ],
+    ignoreHTTPSErrors: true,
+  },
+
+  /* Configure projects for major browsers */
+  projects: [
+    {
+      name: "desktop-chromium-1920",
+      use: { ...devices["Desktop Chrome"], viewport: { width: 1920, height: 1080 } },
+    },
+    {
+      name: "desktop-chromium-1536",
+      use: { ...devices["Desktop Chrome"], viewport: { width: 1536, height: 864 } },
+    },
+    {
+      name: "desktop-chromium-1366",
+      use: { ...devices["Desktop Chrome"], viewport: { width: 1366, height: 768 } },
+    },
+    {
+      name: "desktop-firefox-1920",
+      use: { ...devices["Desktop Firefox"], viewport: { width: 1920, height: 1080 } },
+    },
+    {
+      name: "desktop-firefox-1536",
+      use: { ...devices["Desktop Firefox"], viewport: { width: 1536, height: 864 } },
+    },
+    {
+      name: "desktop-firefox-1366",
+      use: { ...devices["Desktop Firefox"], viewport: { width: 1366, height: 768 } },
+    },
+    {
+      name: "tablet-chromium-portrait",
+      use: { ...devices["Galaxy Tab S9"] },
+    },
+    {
+      name: "tablet-chromium-landscape",
+      use: { ...devices["Galaxy Tab S9 landscape"] },
+    },
+    {
+      name: "mobile-chromium-portrait",
+      use: { ...devices["Pixel 7"] },
+    },
+    {
+      name: "mobile-chromium-landscape",
+      use: { ...devices["Pixel 7 landscape"] },
+    },
+  ],
+  /* Run your local dev server before starting the tests */
+  // webServer: {
+  //   command: 'npm run start',
+  //   url: 'http://localhost:3000',
+  //   reuseExistingServer: !process.env.CI,
+  // },
+});
--- a/prettier.config.js
+++ b/prettier.config.js
@ -0,0 +1,8 @@
+import { configClassique, configXml } from "@gcch/configuration-prettier";
+
+const config = {
+  ...configClassique,
+  overrides: [configXml],
+};
+
+export default config;
--- a/rector.php
+++ b/rector.php
@ -0,0 +1,24 @@
+<?php declare(strict_types=1);
+
+use Rector\Config\RectorConfig;
+
+return RectorConfig::configure()
+    ->withPaths([__DIR__ . '/web/app/themes/haiku-atelier-2024'])
+    ->withSkip([__DIR__ . '/vendor', __DIR__ . '/node_modules'])
+    ->withPhpSets(php85: true)
+    ->withCodeQualityLevel(10)
+    ->withCodingStyleLevel(10)
+    ->withDeadCodeLevel(10)
+    ->withTypeCoverageDocblockLevel(10)
+    ->withTypeCoverageLevel(10)
+    ->withImportNames(
+        importDocBlockNames: true,
+        importNames: true,
+        importShortClasses: true,
+        removeUnusedImports: true,
+    )
+    ->withPreparedSets(
+        carbon: true,
+        instanceOf: true,
+        privatization: true,
+    );
--- a/scripts/SCRIPT.fish
+++ b/scripts/SCRIPT.fish
@ -0,0 +1,7 @@
+#!/usr/bin/fish
+
+for image in *.png
+    gm convert -resize 1000 $image ok-$image.png
+end
+
+flaca -p *
--- a/scripts/SUBSET.fish
+++ b/scripts/SUBSET.fish
@ -0,0 +1,19 @@
+pyftsubset \
+  lato-variable-italic.ttf \
+  --desubroutinize \
+  --flavor=woff2 \
+  --layout-features-="dnom,frac,numr" \
+  --layout-features+="case,pnum,tnum" \
+  --output-file="lato-variable-italic-webfont.woff2" \
+  --unicodes="U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD" \
+  --with-zopfli
+
+
+pyftsubset \
+  lato-variable-italic.ttf \
+  --desubroutinize \
+  --layout-features-="dnom,frac,numr" \
+  --layout-features+="case,pnum,tnum" \
+  --output-file="lato-variable-italic-webfont.ttf" \
+  --unicodes="U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD" \
+  --with-zopfli
--- a/scripts/convertis-images.fish
+++ b/scripts/convertis-images.fish
@ -1,68 +0,0 @@
-#!/usr/bin/fish
-
-for jpg in **/*.{jpg,jpeg}
-    echo $jpg
-
-    set -f avif (path change-extension 'avif' "$jpg")
-    set -f jxl (path change-extension 'jxl' "$jpg")
-    set -f png (path change-extension 'png' "$jpg")
-
-    set -f dimensions (magick identify -format "%w-%h" $jpg)
-    set -f dimensions (string split "-" $dimensions)
-
-    if test $dimensions[1] -eq 1920 || test $dimensions[2] -eq 1920
-        set -f a_bonnes_dimensions true
-    else
-        set -f a_bonnes_dimensions false
-    end
-
-    if test -e $avif && test -e $jxl
-        echo -e "\tAll there."
-        continue
-    end
-
-    magick "$jpg" -resize 1920x1920\> "$png" >/dev/null
-
-    if ! test -e $jxl
-        if test $a_bonnes_dimensions = false
-            cjxl \
-                --allow_jpeg_reconstruction=1 \
-                --brotli_effort=11 \
-                --container=1 \
-                --effort=9 \
-                --lossless_jpeg=1 \
-                --num_threads=-1 \
-                --progressive \
-                $png $jxl &>/dev/null
-
-            djxl \
-                --num_threads=-1 \
-                $jxl $jpg &>/dev/null
-        end
-
-        cjxl \
-            --allow_jpeg_reconstruction=0 \
-            --brotli_effort=11 \
-            --container=1 \
-            --effort=10 \
-            --quality=70 \
-            --lossless_jpeg=0 \
-            --num_threads=-1 \
-            --progressive \
-            $png $jxl &>/dev/null
-        echo -e "\t$jxl"
-
-        set -f avif (path change-extension 'avif' "$jpg")
-        if ! test -e $avif
-            avifenc \
-                -q 70 \
-                -s 0 \
-                -c aom \
-                -y 420 \
-                "$png" "$avif" &>/dev/null
-            echo -e "\t$avif"
-        end
-
-        rm $png
-    end
-end
--- a/scripts/déclenche-sauvegarde-bdd-production.fish
+++ b/scripts/déclenche-sauvegarde-bdd-production.fish
@ -1,4 +0,0 @@
-#!/usr/bin/fish
-
-ssh ade -- fish /srv/haikuatelier.com/scripts/sauvegarde-bdd-production.fish
-rclone copy --check-first --progress --multi-thread-streams 8 ade:/srv/haikuatelier.com/db /home/gcch/Répertoires/git.gcch.fr/gcch/haiku-atelier-2024/db
--- a/scripts/format-sort-files.fish
+++ b/scripts/format-sort-files.fish
@ -1,12 +1,5 @@
-#!/usr/bin/fish
-
 set -f fichiers_toml (fd --glob "*.toml")
-set -f fichiers_angie (fd --glob "*.conf" containers/conf/angie)

 for toml in $fichiers_toml
-    tombi format "$toml"
-end
-
-for angie in $angie
-    nginxfmt "$angie"
+    taplo format "$toml"
 end
--- a/scripts/importe-dernier-export-bdd.ts
+++ b/scripts/importe-dernier-export-bdd.ts
@ -1,96 +0,0 @@
-import { $ } from "bun";
-import type { Option } from "effect";
-import { Array as FxArray, Console, Context, Effect, Layer, ManagedRuntime, Order, pipe, Schema } from "effect";
-import type { UnknownError } from "effect/Cause";
-import { readdir } from "node:fs/promises";
-
-class PodmanError extends Schema.TaggedErrorClass<PodmanError>()("PodmanError", {
-  cause: Schema.Error,
-}) {}
-
-class FSError extends Schema.TaggedErrorClass<FSError>()("FSError", {
-  cause: Schema.Error,
-}) {}
-
-class Podman extends Context.Service<
-  Podman,
-  {
-    launchContainers(): Effect.Effect<string, PodmanError>;
-    importLatestDbInWordPressContainer(exportPath: string): Effect.Effect<string, PodmanError>;
-  }
->()("haikuatelier.fr/scripts/importe-dernier-export-bdd/Podman") {
-  static readonly layer = Layer.effect(
-    Podman,
-    // oxlint-disable-next-line require-yield
-    Effect.gen(function*() {
-      const launchContainers = Effect.fn("launchContainers")(function*() {
-        return yield* pipe(
-          Effect.tryPromise(async () => $`podman compose up -d &> /dev/null`),
-          Effect.map((shell: $.ShellOutput) => shell.text()),
-          Effect.mapError((error: UnknownError) => new PodmanError({ cause: error })),
-        );
-      });
-
-      const importLatestDbInWordPressContainer = Effect.fn("importLatestDbInWordPressContainer")(function*(
-        exportPath: string,
-      ) {
-        return yield* pipe(
-          Effect.tryPromise(
-            async () =>
-              $`podman exec -it haikuatelier.fr-wordpress fish -c "cd web && wp --allow-root db import ${exportPath} > /dev/null"`,
-          ),
-          Effect.map((shell: $.ShellOutput) => shell.text()),
-          Effect.mapError((error: UnknownError) => new PodmanError({ cause: error })),
-        );
-      });
-
-      return Podman.of({
-        launchContainers,
-        importLatestDbInWordPressContainer,
-      });
-    }),
-  );
-}
-
-class FS extends Context.Service<
-  FS,
-  {
-    getLatestDbExport(): Effect.Effect<string, FSError>;
-  }
->()("haikuatelier.fr/scripts/importe-dernier-export-bdd/FS") {
-  static readonly layer = Layer.effect(
-    FS,
-    // oxlint-disable-next-line require-yield
-    Effect.gen(function*() {
-      const getLatestDbExport = Effect.fn("getLatestDbExport")(function*() {
-        return yield* pipe(
-          Effect.tryPromise(async () => readdir(`./db`)),
-          Effect.map((paths: ReadonlyArray<string>) => FxArray.sort(paths, Order.String)),
-          Effect.map((sortedPaths: ReadonlyArray<string>) => FxArray.last(sortedPaths)),
-          Effect.flatMap((path: Option.Option<string>) => Effect.fromOption(path)),
-          Effect.mapError(_ => new FSError({ cause: new Error("Aucun export de BDD n'est disponible.") })),
-        );
-      });
-
-      return FS.of({
-        getLatestDbExport,
-      });
-    }),
-  );
-}
-
-const mainLayer = Layer.mergeAll(Podman.layer, FS.layer);
-const runtime = ManagedRuntime.make(mainLayer);
-
-const program = Effect.fn("program")(function*() {
-  yield* Podman.use(podman => podman.launchContainers());
-  yield* Console.log("Containers are launched.");
-
-  const latestExportPath: string = pipe(yield* FS.use(fs => fs.getLatestDbExport()), path => `../db/${path}`);
-  yield* Console.log(latestExportPath);
-
-  yield* Podman.use(podman => podman.importLatestDbInWordPressContainer(latestExportPath));
-  yield* Console.log("Import done.");
-});
-
-runtime.runFork(program().pipe(Effect.tapError(Console.error)));
--- a/scripts/pull-container-images.ts
+++ b/scripts/pull-container-images.ts
@ -1,88 +1,42 @@
-import { YAML } from "bun";
-import { Array as EffectArray, Console, Data, Effect, pipe, Record, Schema, SchemaIssue } from "effect";
-import { SchemaError } from "effect/Schema";
+import { BunFile, YAML } from "bun";
+import { Array, Console, Effect, Option, pipe, Record, Schema } from "effect";
+import { type UnknownException } from "effect/Cause";
+import { type ParseError } from "effect/ParseResult";
+import { type ReadonlyRecord } from "effect/Record";

 const COMPOSE_PATH = "compose.yaml";
-const DEFAULT_CMD_TIMEOUT = 10_000;
-class Compose extends Schema.Class<Compose>("Compose")({
-  name: Schema.String,
-  services: Schema.Record(Schema.String, Schema.Unknown),
-}) {}

-class ScriptError extends Data.TaggedError("ScriptError")<{ cause: unknown }> {}
+const getServicesKey = (
+  yaml: ReadonlyRecord<string | symbol, any>,
+): Option.Option<ReadonlyArray<string>> =>
+  pipe(
+    Record.get("services")(yaml),
+    Option.andThen(yaml => Record.keys(yaml)),
+  );

-// Const composeSchema = Schema.Record(Schema.Union([Schema.String, Schema.Symbol]), Schema.Unknown);
-// type YamlRecord = ReadonlyRecord<string | symbol, unknown>;
+const getComposeYaml = <A, I, R>(
+  filePath: string,
+  schema: Schema.Schema<A, I, R>,
+): Effect.Effect<A, UnknownException | ParseError, R> =>
+  pipe(
+    Effect.try(() => Bun.file(filePath)),
+    Effect.andThen((file: BunFile) => Effect.tryPromise(() => file.text())),
+    Effect.andThen((text: string) => Effect.try(() => YAML.parse(text))),
+    Effect.andThen((yaml: unknown) => Schema.decodeUnknown(schema)(yaml)),
+  );

-/* */
-
-/**
- * Retourne les noms des services déclarés dans un ficher _Compose_.
- * @param compose Le fichier _Compose_ sous forme d'objet.
- * @returns Les noms des Services sous forme de tableau.
- */
-const getServicesFromComposeYaml: (compose: Compose) => ReadonlyArray<string> = compose =>
-  Record.keys(compose.services);
-
-/**
- * Récupère le contenu texte d'un fichier pour un chemin donné.
- *
- * @param filePath Le chemin du fichier dont on souhaite le contenu.
- * @returns Le contenu textuel du fichier sous forme de chaîne de caractères.
- */
-const getFileContent: (filePath: string) => Effect.Effect<string, ScriptError> = Effect.fn("getFileContent")(
-  function*(filePath) {
-    const fileRef: Bun.BunFile = Bun.file(filePath);
-
-    yield* Effect.tryPromise({
-      catch: (_): ScriptError => new ScriptError({ cause: "The wanted file does not exist." }),
-      try: async (): Promise<boolean> => fileRef.exists(),
-    });
-
-    return yield* Effect.tryPromise({
-      catch: (_): ScriptError => new ScriptError({ cause: "Can't retrieve the file's text content." }),
-      try: async (): Promise<string> => fileRef.text(),
-    });
-  },
-);
-
-/**
- * Récupère le contenu _YAML_ d'un fichier _Compose_ sous forme de `Record`.
- *
- * @param path Le chemin du fichier _Compose_.
- * @param schema Le `Schema` utilisée pour le parsage des données du fichier.
- * @returns Un `Record` des données du fichier.
- */
-const getComposeYaml: <ComposeSchema>(
-  path: string,
-  schema: Schema.Schema<ComposeSchema>,
-) => Effect.Effect<ComposeSchema, ScriptError, unknown> = Effect.fn("getComposeYaml")(function*(path, schema) {
+const programEffect: Effect.Effect<ReadonlyArray<string>> = Effect.gen(function*() {
  return yield* pipe(
-    getFileContent(path),
-    Effect.map((text: string): unknown => YAML.parse(text)),
-    Effect.flatMap((yaml: unknown) =>
-      Schema.decodeUnknownEffect(schema)(yaml, { errors: "all", onExcessProperty: "ignore" })
-    ),
-    Effect.mapError((error): ScriptError => {
-      if (error instanceof SchemaError) {
-        return new ScriptError({ cause: SchemaIssue.makeFormatterStandardSchemaV1()(error.issue) });
-      } else {
-        return error;
-      }
-    }),
+    // Récupère le contenu du fichier compose.yaml sous forme de Record.
+    getComposeYaml(COMPOSE_PATH, Schema.Record({ key: Schema.String, value: Schema.Unknown })),
+    // Récupère la clé des services.
+    Effect.andThen((yaml: ReadonlyRecord<string | symbol, unknown>) => getServicesKey(yaml)),
+    // Retire la clé de l'image WordPress.
+    Effect.andThen((keys: ReadonlyArray<string>) => Array.filter(keys, key => key !== "wordpress")),
+    Effect.orElseSucceed(() => [""]),
+    // Exécute la commande podman.
+    Effect.tap(services => Bun.spawn({ cmd: ["podman", "compose", "pull", ...services], timeout: 10000 })),
  );
 });

-const program: Effect.Effect<ReadonlyArray<string>, ScriptError> = pipe(
-  getComposeYaml(COMPOSE_PATH, Compose),
-  Effect.map((compose: Compose) => getServicesFromComposeYaml(compose)),
-  Effect.map((keys: ReadonlyArray<string>) => EffectArray.filter(keys, key => key !== "wordpress")),
-  Effect.orElseSucceed(() => [""]),
-  Effect.tap((services: ReadonlyArray<string>) => {
-    Bun.spawn({ cmd: ["podman", "compose", "pull", ...services], timeout: DEFAULT_CMD_TIMEOUT });
-    return Effect.succeed(services);
-  }),
-  Effect.tapCause(Console.error),
-);
-
-Effect.runFork(program);
+Effect.runFork(programEffect).pipe(Effect.tapErrorCause(Console.error));
--- a/scripts/remove-scaled-images.php
+++ b/scripts/remove-scaled-images.php
@ -1,6 +1,4 @@
-<?php
-
-declare(strict_types=1);
+<?php declare(strict_types=1);

 require_once 'web/wp/wp-load.php';

@ -14,32 +12,32 @@ global $wpdb;
 $wp_postmeta = "{$wpdb->prefix}postmeta";

 try {
-  $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
-  // Error Handling
-  $sql    = "UPDATE {$wp_postmeta} SET meta_value = REPLACE(meta_value,'-scaled.jpg','.jpg') WHERE meta_key='_wp_attached_file' AND meta_value LIKE '%-scaled.jpg%'";
-  $result = $pdo->exec($sql);
-  print_r($result);
+    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+    // Error Handling
+    $sql = "UPDATE {$wp_postmeta} SET meta_value = REPLACE(meta_value,'-scaled.jpg','.jpg') WHERE meta_key='_wp_attached_file' AND meta_value LIKE '%-scaled.jpg%'";
+    $result = $pdo->exec($sql);
+    print_r($result);
 } catch (PDOException $e) {
-  print_r($e->getMessage());
+    print_r($e->getMessage());
 }

 // replace _wp_attachment_metadata meta_key.
 $image_metas = [];

 try {
-  $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
-  // Error Handling
-  $sql         = "SELECT * FROM {$wp_postmeta} WHERE meta_value LIKE '%-scaled.jpg%' AND meta_key='_wp_attachment_metadata'";
-  $statement   = $pdo->query($sql);
-  $image_metas = $statement->fetchAll();
-  foreach ($image_metas as $meta) {
-    $meta_value         = unserialize($meta['meta_value']);
-    $file               = $meta_value['file'];
-    $meta_value['file'] = str_replace('-scaled.jpg', '.jpg', $file);
-    update_post_meta($meta['post_id'], $meta['meta_key'], $meta_value);
-    $result = get_post_meta($meta['post_id'], $meta['meta_key']);
-    print_r($result);
-  }
+    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+    // Error Handling
+    $sql = "SELECT * FROM {$wp_postmeta} WHERE meta_value LIKE '%-scaled.jpg%' AND meta_key='_wp_attachment_metadata'";
+    $statement = $pdo->query($sql);
+    $image_metas = $statement->fetchAll();
+    foreach ($image_metas as $meta) {
+        $meta_value = unserialize($meta['meta_value']);
+        $file = $meta_value['file'];
+        $meta_value['file'] = str_replace('-scaled.jpg', '.jpg', $file);
+        update_post_meta($meta['post_id'], $meta['meta_key'], $meta_value);
+        $result = get_post_meta($meta['post_id'], $meta['meta_key']);
+        print_r($result);
+    }
 } catch (PDOException $e) {
-  print_r($e->getMessage());
+    print_r($e->getMessage());
 }
--- a/scripts/sauvegarde-bdd-production.fish
+++ b/scripts/sauvegarde-bdd-production.fish
@ -1,5 +1,3 @@
-#!/usr/bin/fish
-
 cd /srv/haikuatelier.com/web
 sudo -S wp-cli --allow-root db export
 sudo -S mv -v /srv/haikuatelier.com/web/*.sql ../db
--- a/scripts/subset-polices.fish
+++ b/scripts/subset-polices.fish
@ -1,20 +0,0 @@
-#!/usr/bin/fish
-
-pyftsubset \
-    lato-variable-italic.ttf \
-    --desubroutinize \
-    --flavor=woff2 \
-    --layout-features-="dnom,frac,numr" \
-    --layout-features+="case,pnum,tnum" \
-    --output-file="lato-variable-italic-webfont.woff2" \
-    --unicodes="U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD" \
-    --with-zopfli
-
-pyftsubset \
-    lato-variable-italic.ttf \
-    --desubroutinize \
-    --layout-features-="dnom,frac,numr" \
-    --layout-features+="case,pnum,tnum" \
-    --output-file="lato-variable-italic-webfont.ttf" \
-    --unicodes="U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD" \
-    --with-zopfli
--- a/stylelint.config.js
+++ b/stylelint.config.js
@ -0,0 +1,40 @@
+// @ts-expect-error -- La dépendance ne dispose pas de types.
+import { propertyGroups } from "stylelint-config-clean-order";
+
+/** @type {string[][]} */
+// eslint-disable-next-line @typescript-eslint/no-unsafe-argument -- Impossible de typer correctement avec JSDoc.
+const groupesProprietes = Array.from(/** @type {GroupeProprietes} */ propertyGroups);
+
+/** @import { StylelintConfigCleanOrderPropertyGroup } from "./lib/stylelint" */
+/** @type {Array<StylelintConfigCleanOrderPropertyGroup>} */
+const ordreProprietes = groupesProprietes.map(properties => ({
+  emptyLineBefore: "never",
+  noEmptyLineBetween: true,
+  properties,
+}));
+
+/** @type {import("stylelint").Config} */
+export default {
+  extends: ["stylelint-config-standard-scss", "stylelint-config-sass-guidelines", "stylelint-config-clean-order"],
+  plugins: ["stylelint-declaration-block-no-ignored-properties"],
+  rules: {
+    "@stylistic/function-parentheses-space-inside": null,
+    "@stylistic/selector-list-comma-newline-after": null,
+    "@stylistic/string-quotes": null,
+    "custom-property-pattern": null,
+    "declaration-block-no-duplicate-custom-properties": true,
+    "declaration-block-no-duplicate-properties": true,
+    "declaration-block-no-redundant-longhand-properties": true,
+    "declaration-block-no-shorthand-property-overrides": true,
+    "max-nesting-depth": null,
+    "no-descending-specificity": null,
+    "no-duplicate-selectors": [true, { disallowInList: false }],
+    "order/properties-order": [ordreProprietes, { severity: "error", unspecified: "bottomAlphabetical" }],
+    "plugin/declaration-block-no-ignored-properties": true,
+    "selector-class-pattern": null,
+    "selector-id-pattern": null,
+    "selector-max-compound-selectors": null,
+    "selector-max-id": null,
+    "selector-no-qualifying-type": null,
+  },
+};
--- a/tests/playwright/capture.spec.ts
+++ b/tests/playwright/capture.spec.ts
@ -1,12 +1,14 @@
-import { expect, test } from "@playwright/test";
-import type { Page } from "@playwright/test";
+import { expect, type Page, test } from "@playwright/test";

 type TestPage = {
  pageName: string;
  url: string;
 };

-const genTimestamp = (): string => Intl.DateTimeFormat("sv-SE", { dateStyle: "short" }).format(Date.now());
+const genTimestamp = (): string =>
+  Intl.DateTimeFormat("sv-SE", {
+    dateStyle: "short",
+  }).format(Date.now());

 const takeFullPageScreenshot = async (page: Page, name: string): Promise<void> => {
  await page.screenshot({ fullPage: false, path: `captures/${name}`, type: "png" });
@ -36,16 +38,14 @@ Array.from<TestPage>([
    url: "https://haikuatelier.gcch.local/product/fuyou-long-earrings-silver/",
  },
 ]).forEach(({ pageName, url }) => {
-  test.skip(pageName, async ({ page }, testInfo) => {
+  test(pageName, async ({ page }, testInfo) => {
    await page.goto(url);

    const projectName = testInfo.project.name;
    const timestamp: string = genTimestamp();
-    const viewportSize = page.viewportSize() ?? { height: 0, width: 0 };
+    const viewport = page.viewportSize();

-    const captureName = `${pageName}/${projectName}-${String(viewportSize.width)}-${
-      String(viewportSize.height)
-    } ${timestamp}.png`;
+    const captureName = `${pageName}/${projectName}-${viewport?.width}-${viewport?.height} ${timestamp}.png`;

    await takeFullPageScreenshot(page, captureName);
    await expect(page).toHaveURL(url);
--- a/Show more
+++ b/Show more
Author	SHA1	Message	Date
gcch	cfde45aa5e	corvée(images) optimise les derniers téléversements	2026-05-03 15:24:26 +02:00
gcch	058bc7861f	corvée(images) ajoute les derniers téléversements	2026-05-03 14:54:41 +02:00
gcch	cdafc9c6ef	corvée(images) optimise les images	2026-04-28 11:18:26 +02:00
gcch	56307f4ffb	corvée(images) ajoute les images téléversées	2026-04-28 11:08:34 +02:00
gcch	9fd8be4e20	corvée(images) ajoute les images téléversées	2026-04-27 23:16:21 +02:00
gcch	f623103e5d	corvée: exporte la BDD de production	2026-04-27 23:15:04 +02:00
gcch	18c603fc6a	corvée: optimise les images, nettoie les miniatures, màj le script de conversion	2026-04-27 14:08:11 +02:00
gcch	6aa7a257d2	corvée: nettoie les téléversements et ajoute les derniers	2026-04-27 11:43:20 +02:00
gcch	016c7466b3	fonc: prend en compte un nouvel attribut de Produit	2026-04-27 11:42:47 +02:00
gcch	b3da4c2cb3	corvée: optimise les images	2026-04-24 17:40:56 +02:00
gcch	a1192750cf	fix(accueil) corrige la vidéo petites tailles d'écran - n'utilise que des vidéos en MP4 x264	2026-04-24 17:38:35 +02:00
gcch	5ef4d5de3f	fix(accueil) affiche les petites vidéos à partir d'une plus grande taille d'écran	2026-04-24 16:49:27 +02:00
gcch	ca7ebdfbe2	ref: remplace l'animation de l'Accueil par une vidéo et la déplace dans A propos	2026-04-24 16:37:14 +02:00
gcch	7ec0027cce	corvée: exporte la BDD + ajoute les dernières images	2026-04-24 16:22:36 +02:00