Update: The Founder has responded to feedback and stated that the paywalled LetsEncrypt will be removed in the next version.

BunkerWeb is an OpenSource WAF with some great features and effective protections. Whilst some quality of life features are annoyingly behind a paywall (wildcard certs in particular) it is definitely work checking out and keeping an eye on.

In this video I deploy BunkerWeb in Docker, pull an SSL certificate, and perform some rudimentary testing.

Docker Compose: github.com/JamesTurland/JimsGarage/tree/main/Bunke…
BunkerWeb: www.bunkerweb.io/
Nikto: github.com/sullo/nikto

Discord: discord.gg/qW5vEBekz5
BlueSky: bsky.app/profile/jims-garage.bsky.social
X: x.com/jimsgarage_
Reddit: www.reddit.com/user/Jims-Garage
GitHub: github.com/JamesTurland/JimsGarage

00:00 - Intro (WAF Overview / Pay Wall Problem...)
04:52 - Configuration Walkthrough
10:20 - First Login
13:30 - SSL Certs
17:02 - Testing with Nikto
20:08 - Plugin Overview
22:39 - Outro