feat: switch to Weboria's own registry, clean licensing docs, expand product copy

Registry: docker-compose.yml now pulls argus-api/argus-ui/argus-proxy from
git-cloud.weboria.eu/weboria (Gitea's built-in container registry) instead
of ghcr.io. Built and pushed real production images from main (v3.73.0)
before switching — verified anonymous `docker pull` works for all three
with zero login required, matching the public installer's no-friction
promise. install.sh's registry comment updated to match; no more "gap."

Licensing: reworked per a full commercial-distribution review. Removed
MaxMind/GeoLite2 entirely (confirmed geoip2-golang isn't even in go.mod —
GeoIP is RIR-based, not MaxMind-based, and has been for a while).
Clarified TimescaleDB's licensing story (embedded component distributed
as part of the appliance, not a hosted DB service) rather than leaving it
under a vague "reviewed before bundling" note. Added missing real
dependencies grounded against the actual Dockerfiles (Alpine Linux,
PostgreSQL, Go runtime, Node.js build-time-only, OpenSSL, curl, BusyBox).
Renamed THIRD_PARTY_LICENSES -> THIRD_PARTY_LICENSES.md, added a
"Weboria Proprietary Components" section. Removed the "pending legal
review" section that was specifically about MaxMind/TimescaleDB, now
resolved by the above -- LICENSE's own placeholder-pending-final-terms
disclaimer stays, since drafting real commercial license text is separate
legal work, not something to paper over.

README: removed the internal "this repo contains no proprietary code"
meta-description (customers don't need to see project scaffolding notes)
and the "known gap" callout (both gaps closed above). Expanded the
feature list with a dedicated ANIS Threat Intelligence section and richer
detail on DNS Security, Bot/AI-crawler defense, and the Guided Security
Policy Center. Stronger positioning copy up top.
This commit is contained in:
2026-07-25 16:34:39 +00:00
parent d1aa3a0c87
commit abab6775d6
6 changed files with 165 additions and 90 deletions
+16 -9
View File
@@ -1,18 +1,25 @@
ARGUS Secure
Copyright (c) 2025-2026 AI4SEC / lmelo
ARGUS Enterprise Web Security Platform
This product includes software developed by third parties under their own open-source
licenses. Full license texts and attributions are listed in THIRD_PARTY_LICENSES.
Copyright © 2025-2026 Weboria
ARGUS contains third-party open-source software.
The licenses and notices for these components are available in:
THIRD_PARTY_LICENSES.md
Notable components:
- nginx (BSD-2-Clause) — Copyright (C) 2002-2024 Igor Sysoev, (C) 2011-2024 Nginx, Inc.
- ModSecurity (Apache-2.0) — Copyright (C) 2002-2024 Trustwave Holdings, Inc.
- OWASP Core Rule Set (Apache-2.0) — Copyright (C) 2006-2024 Trustwave Holdings, Inc.,
OWASP Core Rule Set contributors
- TimescaleDB Community Edition (Timescale License) — see THIRD_PARTY_LICENSES for
redistribution terms
- MaxMind GeoLite2 (GeoLite2 EULA) — "This product includes GeoLite2 data created by
MaxMind, available from https://www.maxmind.com"
- TimescaleDB (Timescale License / Apache 2.0 depending on component) — distributed as an
embedded time-series storage component as part of the ARGUS Enterprise Appliance, not
offered as a standalone database service. See THIRD_PARTY_LICENSES.md for detail.
- Valkey (BSD-3-Clause)
- PostgreSQL (PostgreSQL License), Alpine Linux, BusyBox, Go runtime, Node.js (build-time
only), OpenSSL, curl — see THIRD_PARTY_LICENSES.md
This repository's own source code is proprietary; see LICENSE.
The following ARGUS components are proprietary software developed by Weboria and are not
covered by the third-party licenses above: ARGUS Core Platform, ARGUS Management Interface,
ARGUS Security Automation Engine, ARGUS API Layer, ARGUS Threat Analysis Components, ARGUS
Licensing System, ARGUS Enterprise Features, and Weboria Integrations. These are distributed
under the ARGUS Commercial License — see LICENSE.