Skip to content

START-HERE.md

Latest commit

 

History

History
245 lines (184 loc) · 5.2 KB

START-HERE.md

File metadata and controls

245 lines (184 loc) · 5.2 KB
Raw

🚀 START HERE - Andaflare Setup Guide

🎯 Quick Start (5 Minutes)

Step 1: Install on VPS

# SSH into your VPS
ssh root@your-vps-ip

# Clone repository
git clone https://github.com/sudo-tool/andaflare.git
cd andaflare

# Run installer
chmod +x install.sh
./install.sh

# Enter a password when prompted (for admin panel)

Step 2: Access Dashboard

Open in your browser:

http://YOUR_VPS_IP:46789

Login with the password you set during installation.

Step 3: Add Your First Domain

  1. Click "Ajouter un domaine"
  2. Fill in:
    • Domain: example.com
    • Target IP: Your backend server IP (e.g., 192.168.1.10)
    • Port: Your app port (e.g., 80)
  3. Check options:
    • ✅ SSL/TLS (for HTTPS)
    • ✅ Force HTTPS (redirect HTTP to HTTPS)
    • ✅ Cache Assets (faster loading)
  4. Click "Ajouter"

Step 4: Update DNS

At your domain registrar (OVH, Gandi, Cloudflare, etc.):

Type: A
Name: @
Value: YOUR_VPS_IP
TTL: 300

Type: A
Name: www
Value: YOUR_VPS_IP
TTL: 300

Wait 5-10 minutes for DNS propagation.

Step 5: Verify

# Check DNS
dig example.com +short
# Should return your VPS IP

# Check SSL status in dashboard
# Status should change: Pending → Active

# Test HTTPS
curl -I https://example.com

✅ What You Get

After these 5 steps:

  • ✅ Domain protected against DDoS (L3, L4, L7)
  • ✅ Free SSL certificate (Let's Encrypt)
  • ✅ Automatic HTTPS redirect
  • ✅ Static files cached (30 days)
  • ✅ Protection against XSS, SQL injection, scanners
  • ✅ Real-time statistics
  • ✅ Automatic attack detection

🎨 Features Overview

Dashboard (Dark Theme)

  • Modern futuristic UI
  • Real-time stats via WebSocket
  • Domain management
  • SSL management
  • Firewall controls
  • Attack mode toggle

SSL/TLS

  • Automatic certificate obtention
  • Auto-renewal (daily check)
  • One-click enable/disable
  • Status tracking (pending/active/failed)

DDoS Protection

Layer 3 (Network):

  • ICMP flood protection
  • Packet filtering
  • Invalid packet dropping

Layer 4 (Transport):

  • SYN flood protection (SYN cookies)
  • Connection limiting
  • Port scan detection

Layer 7 (Application):

  • Rate limiting (1000 req/min, 50 req/sec)
  • CAPTCHA challenge
  • Behavioral analysis
  • Automatic IP blocking

Discord Bot

/banip <ip> [reason] [duration]  - Block an IP
/unbanip <ip>                     - Unblock an IP
/banlist                          - List blocked IPs
/stats                            - System statistics

📚 Documentation

File Description
FINAL-README.md Complete guide
docs/DISCORD-COMMANDS.md Discord setup
docs/TROUBLESHOOTING.md Fix problems
docs/PROXY-MANAGER.md Proxy features

🔧 Common Commands

# Check status
systemctl status andaflare
systemctl status nginx

# View logs
tail -f /opt/antiddos/logs/app.log

# Blocked IPs
ipset list ddos_blacklist

# SSL certificates
certbot certificates

# Test nginx config
nginx -t

# Restart everything
systemctl restart andaflare nginx

🐛 Troubleshooting

Dashboard not accessible?

systemctl status andaflare
netstat -tulpn | grep 46789
ufw allow 46789

SSL failing?

# Check DNS
dig yourdomain.com +short

# Check certbot logs
tail -f /var/log/letsencrypt/letsencrypt.log

# Test manual
certbot certonly --webroot -w /var/www/html -d yourdomain.com --dry-run

Domain not working?

# Check nginx
nginx -t
systemctl status nginx

# Check config
ls -la /etc/nginx/conf.d/

# View logs
tail -f /var/log/nginx/error.log

🆘 Need Help?

  1. Check logs first:

    tail -f /opt/antiddos/logs/app.log

  2. Run system check:

    ./check-system.sh

  3. Open an issue: https://github.com/sudo-tool/andaflare/issues

🎯 Next Steps

Once basic setup is done:

  1. Configure Discord Bot (guide)
  2. Add more domains (unlimited)
  3. Customize protection thresholds (src/enhanced-protection.js)
  4. Monitor attacks (Discord alerts + Dashboard)
  5. Test protection (./test-attack.sh)

⚡ Pro Tips

  • Always check logs in browser console (F12) for errors
  • DNS propagation can take up to 48h (usually 5-10min)
  • SSL certificates auto-renew every day at 3 AM
  • Attack mode activates automatically when thresholds exceeded
  • Dashboard updates in real-time (no refresh needed)

🌟 Key Features

Feature Status
Nginx Proxy Manager ✅ Working
SSL Let's Encrypt ✅ One-click
DDoS Protection L3-L7 ✅ Active
Dark Futuristic Theme ✅ Stunning
Discord Commands ✅ Bot ready
Real-time Stats ✅ WebSocket
Auto IP Blocking ✅ Smart
CAPTCHA Protection ✅ Enabled

You're ready to go! 🚀

If you encounter any issues, check TROUBLESHOOTING.md or open an issue.