neonail-database/fix-https-form-security.sh
2025-08-10 18:09:07 +02:00

71 lines
1.8 KiB
Bash
Executable File

#!/bin/bash
echo "🔒 HTTPS-Formular-Sicherheit beheben"
echo "==================================="
# 1. .env für HTTPS konfigurieren
echo "📝 Konfiguriere .env für HTTPS..."
sed -i 's|APP_URL=http://|APP_URL=https://|' .env
sed -i 's|APP_URL=https://192.168.30.81|APP_URL=https://neonail.vogt.de.com|' .env
# 2. Session-Konfiguration für HTTPS
echo "🔐 Konfiguriere Sessions für HTTPS..."
cat >> .env << 'EOF'
# HTTPS-Konfiguration
SESSION_SECURE_COOKIE=true
SESSION_SAME_SITE=lax
EOF
# 3. Laravel Cache leeren
echo "🧹 Leere Laravel Cache..."
php artisan config:clear 2>/dev/null || echo "⚠️ config:clear übersprungen"
php artisan cache:clear 2>/dev/null || echo "⚠️ cache:clear übersprungen"
php artisan route:clear 2>/dev/null || echo "⚠️ route:clear übersprungen"
# 4. CSRF-Token für HTTPS konfigurieren
echo "🛡️ Konfiguriere CSRF für HTTPS..."
cat > config/csrf.php << 'EOF'
<?php
return [
'cookie' => [
'secure' => true,
'same_site' => 'lax',
],
];
EOF
# 5. Trusted Proxies konfigurieren
echo "🌐 Konfiguriere Trusted Proxies..."
cat > config/trusted-proxies.php << 'EOF'
<?php
return [
'proxies' => [
'192.168.30.81',
'neonail.vogt.de.com',
'127.0.0.1',
'::1',
],
'headers' => [
'X-Forwarded-For' => 'X_FORWARDED_FOR',
'X-Forwarded-Host' => 'X_FORWARDED_HOST',
'X-Forwarded-Proto' => 'X_FORWARDED_PROTO',
],
];
EOF
# 6. Test
echo "🧪 Teste HTTPS-Konfiguration..."
curl -I https://neonail.vogt.de.com
echo ""
echo "✅ HTTPS-Formular-Sicherheit behoben!"
echo "📋 Testen Sie: https://neonail.vogt.de.com"
echo ""
echo "📋 Falls Warnungen bleiben:"
echo "1. Browser-Cache leeren (Strg+F5)"
echo "2. Private/Inkognito-Modus testen"
echo "3. HTTPS-Zertifikat prüfen"