chaitin/SafeLine ? reverse-engineered prompt

Build me a self-hosted web application firewall (WAF) to protect my web apps from attacks. It should work as a reverse proxy that sits in front of my services, filtering all incoming traffic to block threats like SQL injection, XSS, and command injection.

I need it to have defenses against bots and other abuse. This includes rate limiting to stop brute-force login attempts and an anti-bot challenge system to make sure traffic is from real users. It would also be great if it had a simple password challenge feature to protect an entire site.

A key part of this is the visual dashboard. I want a clean web UI where I can see analytics on attacks being blocked, add the websites I want to protect, and manage the security policies. Please set this up so it can be easily deployed using Docker.