CitrixPot: NetScaler / Citrix ADC Gateway honeypot (initial public release)

deploy/decoy-ingress.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Source-preserving ingress for the NetScaler decoy
+After=network-online.target
+[Service]
+EnvironmentFile=/etc/decoy.env
+DynamicUser=yes
+# --allow-from limits who may reach the origin to the edge proxy and trusted hops (see .env).
+ExecStart=/usr/bin/python3 /opt/decoy-ingress/ingress_proxy.py --bind=${INGRESS_BIND} --port=${INGRESS_PORT} --target=${INGRESS_TARGET} --target-port=${INGRESS_TARGET_PORT} --allow-from=${INGRESS_ALLOW_FROM}
+Restart=on-failure
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+MemoryMax=128M
+TasksMax=32
+[Install]
+WantedBy=multi-user.target