BunkerWeb: deploy, configure, protect a service

Written for BunkerWeb 1.6.x, verified at v1.6.15. Re-check image tags, settings and file locations on any other release.

Boundaries

This skill installs and configures. Hand off anything else:

The request is about	Use
An error: 403, 502, 504, a ban, Let's Encrypt failing, a setting that is not applied, the UI cannot reach BunkerWeb	bunkerweb-troubleshooting
A ModSecurity or OWASP CRS false positive, rule `949110`, an exclusion that does nothing	bunkerweb-modsecurity-crs-tuning
Moving to BunkerWeb from nginx, Nginx Proxy Manager, SWAG, Kubernetes ingress-nginx, Traefik, Caddy, Apache httpd, HAProxy or standalone ModSecurity	The skill for that source: bunkerweb-migrate-nginx, bunkerweb-migrate-nginx-proxy-manager, bunkerweb-migrate-swag, bunkerweb-migrate-ingress-nginx, bunkerweb-migrate-traefik, bunkerweb-migrate-caddy, bunkerweb-migrate-apache, bunkerweb-migrate-haproxy, bunkerweb-migrate-modsecurity
Moving to BunkerWeb from any other source (Envoy, IIS, a cloud WAF, ...) or from several at once	bunkerweb-migrate
Live actions on a running instance (list or lift bans, read or change settings through the API)	bunkerweb-mcp
Infrastructure as code	bunkerweb-helm for Kubernetes, terraform-provider-bunkerweb for Terraform