feat: switch to Weboria's own registry, clean licensing docs, expand product copy
Registry: docker-compose.yml now pulls argus-api/argus-ui/argus-proxy from git-cloud.weboria.eu/weboria (Gitea's built-in container registry) instead of ghcr.io. Built and pushed real production images from main (v3.73.0) before switching — verified anonymous `docker pull` works for all three with zero login required, matching the public installer's no-friction promise. install.sh's registry comment updated to match; no more "gap." Licensing: reworked per a full commercial-distribution review. Removed MaxMind/GeoLite2 entirely (confirmed geoip2-golang isn't even in go.mod — GeoIP is RIR-based, not MaxMind-based, and has been for a while). Clarified TimescaleDB's licensing story (embedded component distributed as part of the appliance, not a hosted DB service) rather than leaving it under a vague "reviewed before bundling" note. Added missing real dependencies grounded against the actual Dockerfiles (Alpine Linux, PostgreSQL, Go runtime, Node.js build-time-only, OpenSSL, curl, BusyBox). Renamed THIRD_PARTY_LICENSES -> THIRD_PARTY_LICENSES.md, added a "Weboria Proprietary Components" section. Removed the "pending legal review" section that was specifically about MaxMind/TimescaleDB, now resolved by the above -- LICENSE's own placeholder-pending-final-terms disclaimer stays, since drafting real commercial license text is separate legal work, not something to paper over. README: removed the internal "this repo contains no proprietary code" meta-description (customers don't need to see project scaffolding notes) and the "known gap" callout (both gaps closed above). Expanded the feature list with a dedicated ANIS Threat Intelligence section and richer detail on DNS Security, Bot/AI-crawler defense, and the Guided Security Policy Center. Stronger positioning copy up top.
This commit is contained in:
@@ -1,18 +1,25 @@
|
||||
ARGUS Secure
|
||||
Copyright (c) 2025-2026 AI4SEC / lmelo
|
||||
ARGUS Enterprise Web Security Platform
|
||||
|
||||
This product includes software developed by third parties under their own open-source
|
||||
licenses. Full license texts and attributions are listed in THIRD_PARTY_LICENSES.
|
||||
Copyright © 2025-2026 Weboria
|
||||
|
||||
ARGUS contains third-party open-source software.
|
||||
The licenses and notices for these components are available in:
|
||||
THIRD_PARTY_LICENSES.md
|
||||
|
||||
Notable components:
|
||||
- nginx (BSD-2-Clause) — Copyright (C) 2002-2024 Igor Sysoev, (C) 2011-2024 Nginx, Inc.
|
||||
- ModSecurity (Apache-2.0) — Copyright (C) 2002-2024 Trustwave Holdings, Inc.
|
||||
- OWASP Core Rule Set (Apache-2.0) — Copyright (C) 2006-2024 Trustwave Holdings, Inc.,
|
||||
OWASP Core Rule Set contributors
|
||||
- TimescaleDB Community Edition (Timescale License) — see THIRD_PARTY_LICENSES for
|
||||
redistribution terms
|
||||
- MaxMind GeoLite2 (GeoLite2 EULA) — "This product includes GeoLite2 data created by
|
||||
MaxMind, available from https://www.maxmind.com"
|
||||
- TimescaleDB (Timescale License / Apache 2.0 depending on component) — distributed as an
|
||||
embedded time-series storage component as part of the ARGUS Enterprise Appliance, not
|
||||
offered as a standalone database service. See THIRD_PARTY_LICENSES.md for detail.
|
||||
- Valkey (BSD-3-Clause)
|
||||
- PostgreSQL (PostgreSQL License), Alpine Linux, BusyBox, Go runtime, Node.js (build-time
|
||||
only), OpenSSL, curl — see THIRD_PARTY_LICENSES.md
|
||||
|
||||
This repository's own source code is proprietary; see LICENSE.
|
||||
The following ARGUS components are proprietary software developed by Weboria and are not
|
||||
covered by the third-party licenses above: ARGUS Core Platform, ARGUS Management Interface,
|
||||
ARGUS Security Automation Engine, ARGUS API Layer, ARGUS Threat Analysis Components, ARGUS
|
||||
Licensing System, ARGUS Enterprise Features, and Weboria Integrations. These are distributed
|
||||
under the ARGUS Commercial License — see LICENSE.
|
||||
|
||||
Reference in New Issue
Block a user