- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
(apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
(image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
(debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)
18 lines
552 B
Plaintext
18 lines
552 B
Plaintext
service ctf
|
|
{
|
|
disable = no
|
|
socket_type = stream
|
|
protocol = tcp
|
|
wait = no
|
|
user = root
|
|
type = UNLISTED
|
|
port = 8000
|
|
bind = 0.0.0.0
|
|
server = /bin/sh
|
|
server_args = /ctf/start.sh
|
|
banner_fail = /etc/banner_fail
|
|
# safety options
|
|
per_source = 10 # the maximum instances of this service per source IP address
|
|
rlimit_cpu = 1 # the maximum number of CPU seconds that the service may use
|
|
#rlimit_as = 1024M # the Address Space resource limit for the service
|
|
} |