tech
abab6775d6
Registry: docker-compose.yml now pulls argus-api/argus-ui/argus-proxy from git-cloud.weboria.eu/weboria (Gitea's built-in container registry) instead of ghcr.io. Built and pushed real production images from main (v3.73.0) before switching — verified anonymous `docker pull` works for all three with zero login required, matching the public installer's no-friction promise. install.sh's registry comment updated to match; no more "gap." Licensing: reworked per a full commercial-distribution review. Removed MaxMind/GeoLite2 entirely (confirmed geoip2-golang isn't even in go.mod — GeoIP is RIR-based, not MaxMind-based, and has been for a while). Clarified TimescaleDB's licensing story (embedded component distributed as part of the appliance, not a hosted DB service) rather than leaving it under a vague "reviewed before bundling" note. Added missing real dependencies grounded against the actual Dockerfiles (Alpine Linux, PostgreSQL, Go runtime, Node.js build-time-only, OpenSSL, curl, BusyBox). Renamed THIRD_PARTY_LICENSES -> THIRD_PARTY_LICENSES.md, added a "Weboria Proprietary Components" section. Removed the "pending legal review" section that was specifically about MaxMind/TimescaleDB, now resolved by the above -- LICENSE's own placeholder-pending-final-terms disclaimer stays, since drafting real commercial license text is separate legal work, not something to paper over. README: removed the internal "this repo contains no proprietary code" meta-description (customers don't need to see project scaffolding notes) and the "known gap" callout (both gaps closed above). Expanded the feature list with a dedicated ANIS Threat Intelligence section and richer detail on DNS Security, Bot/AI-crawler defense, and the Guided Security Policy Center. Stronger positioning copy up top.
26 lines
1.3 KiB
Plaintext
26 lines
1.3 KiB
Plaintext
ARGUS Enterprise Web Security Platform
|
|
|
|
Copyright © 2025-2026 Weboria
|
|
|
|
ARGUS contains third-party open-source software.
|
|
The licenses and notices for these components are available in:
|
|
THIRD_PARTY_LICENSES.md
|
|
|
|
Notable components:
|
|
- nginx (BSD-2-Clause) — Copyright (C) 2002-2024 Igor Sysoev, (C) 2011-2024 Nginx, Inc.
|
|
- ModSecurity (Apache-2.0) — Copyright (C) 2002-2024 Trustwave Holdings, Inc.
|
|
- OWASP Core Rule Set (Apache-2.0) — Copyright (C) 2006-2024 Trustwave Holdings, Inc.,
|
|
OWASP Core Rule Set contributors
|
|
- TimescaleDB (Timescale License / Apache 2.0 depending on component) — distributed as an
|
|
embedded time-series storage component as part of the ARGUS Enterprise Appliance, not
|
|
offered as a standalone database service. See THIRD_PARTY_LICENSES.md for detail.
|
|
- Valkey (BSD-3-Clause)
|
|
- PostgreSQL (PostgreSQL License), Alpine Linux, BusyBox, Go runtime, Node.js (build-time
|
|
only), OpenSSL, curl — see THIRD_PARTY_LICENSES.md
|
|
|
|
The following ARGUS components are proprietary software developed by Weboria and are not
|
|
covered by the third-party licenses above: ARGUS Core Platform, ARGUS Management Interface,
|
|
ARGUS Security Automation Engine, ARGUS API Layer, ARGUS Threat Analysis Components, ARGUS
|
|
Licensing System, ARGUS Enterprise Features, and Weboria Integrations. These are distributed
|
|
under the ARGUS Commercial License — see LICENSE.
|