PHPackages douglasthwaites/oh-vapor - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [HTTP & Networking](/categories/http) 4. / 5. douglasthwaites/oh-vapor ActivePlugin[HTTP & Networking](/categories/http) douglasthwaites/oh-vapor ======================== A package to allow Oh-Dear through the AWS WAF controlled by Vapor. v1.0.12(10mo ago)02.7k1[2 issues](https://github.com/DougThwaites/oh-vapor/issues)PHPPHP ^8.0 Since Feb 2Pushed 10mo ago1 watchersCompare [ Source](https://github.com/DougThwaites/oh-vapor)[ Packagist](https://packagist.org/packages/douglasthwaites/oh-vapor)[ RSS](/packages/douglasthwaites-oh-vapor/feed)WikiDiscussions main Synced 1mo ago READMEChangelog (5)Dependencies (6)Versions (13)Used By (0) OhVapor! ======== [](#ohvapor) This package provides support for the use case of [Laravel Vapor](https://vapor.laravel.com/) with the managed firewall (AWS WAF) enabled and the [Oh Dear](https://ohdear.app/) monitoring service. Why? ---- [](#why) When using OhDear to monitor your Laravel Vapor application if a firewall is enabled Vapor the OhDear is likely going to be blocked by the AWS WAF as automated traffic (which it is ;)). Usually this would just mean whitelisting Oh Dear's IP addresses in the AWS WAF however in this case that will only work until your next `vapor deploy` at which point the firewall is completely reset removing the whitelisted IP's and OhDear will be blocked again. Installation ------------ [](#installation) ``` composer require douglasthwaites/oh-vapor ``` Configuration ------------- [](#configuration) AWS access credentials with full WAF access only and your Oh Dear API key ``` WAF_AWS_ACCESS_KEY_ID=very WAF_AWS_SECRET_ACCESS_KEY=secret WAF_AWS_DEFAULT_REGION=stuff OH_DEAR_API_KEY=here ``` There is also a publishable config file if you wish. How does it work ---------------- [](#how-does-it-work) To get around this limitation of two fantastic tools OhVapor has two commands, once which sets a maintenance period in Oh Dear and then another which re configures the AWS firewall to allow Oh Dear's IP's through. ### Start maintenance command [](#start-maintenance-command) Create a maintenance window in OhDear for x many seconds on y many site ID's: ``` php artisan oh-vapor:start-maintenance seconds siteId ``` ### Update WAF command [](#update-waf-command) When reconfiguring the firewall OhVapor will reach out to get the [lastest list of Oh Dear IP's](https://ohdear.app/docs/faq/what-ips-does-oh-dear-monitor-from) and then create an IP set which is then applied to the WAF as a scope down statement applied to both the rate limit and bot control rules... i.e let em through ;) It'll also use/reapply the current list of firewall rules in your vapor.yml ``` php artisan oh-vapor:update-waf environmentName ``` ### Where to call these command? [](#where-to-call-these-command) These commands can be called anytime but putting them in your CI/CD makes the most sense. ``` # Put Oh Dear site ID 12345 into maintenance mode for 5 minutes php artisan oh-vapor:start-maintenance 300 12345 # Deploy to Vapor vapor deploy production # Allow Oh Dear through the firewall php artisan oh-vapor:update-waf production # Maintenance period ends and Oh Dear can check your app again :) ``` As long as the vapor deploy is quicker than your maintenance window you can dial it in till your hearts content. Keep on keeping on! ### Health Score 36 — LowBetter than 82% of packages Maintenance53 Moderate activity, may be stable Popularity17 Limited adoption so far Community10 Small or concentrated contributor base Maturity53 Maturing project, gaining track record Bus Factor1 Top contributor holds 85.7% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~46 days Recently: every ~104 days Total 12 Last Release 323d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/6bda91af1580994e40deecb51609cd7c0d521eb8992ec9443a537f46188056dd?d=identicon)[DougThwaites](/maintainers/DougThwaites) --- Top Contributors [![DougThwaites](https://avatars.githubusercontent.com/u/4946031?v=4)](https://github.com/DougThwaites "DougThwaites (6 commits)")[![jvcayao](https://avatars.githubusercontent.com/u/13845322?v=4)](https://github.com/jvcayao "jvcayao (1 commits)") ### Embed Badge ![Health badge](/badges/douglasthwaites-oh-vapor/health.svg) ``` [![Health](https://phpackages.com/badges/douglasthwaites-oh-vapor/health.svg)](https://phpackages.com/packages/douglasthwaites-oh-vapor) ``` ### Alternatives [laravel/sail Docker files for running a basic Laravel application. 1.9k186.9M1.0k](/packages/laravel-sail)[laravel/boost Laravel Boost accelerates AI-assisted development by providing the essential context and structure that AI needs to generate high-quality, Laravel-specific code. 3.4k10.6M274](/packages/laravel-boost)[orchestra/canvas Code Generators for Laravel Applications and Packages 21017.2M158](/packages/orchestra-canvas)[laravel/ai The official AI SDK for Laravel. 732506.3k60](/packages/laravel-ai)[laravel/roster Detect packages & approaches in use within a Laravel project 15410.4M7](/packages/laravel-roster)[laravel-shift/curl-converter A command line tool to convert curl requests to Laravel HTTP requests. 935.3k](/packages/laravel-shift-curl-converter) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)