Join the community today
Register Now

Beta Branch update optional Nginx ModSecurity setup routine in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Dec 18, 2021.

  1. eva2000

    eva2000 Administrator Staff Member

    59,401
    12,517
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,153
    Local Time:
    9:00 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update optional Nginx ModSecurity setup routine in 123.09beta01

    - add option to switch to ModSecurity JSOn log format setting SecAuditLogFormat JSON when NGINX_MODSECURITY_JSONLOGS='y' combined with NGINX_MODSECURITY='y' variables are set in persistent config file /etc/centminmod/custom_config.inc prior to running centmin.sh menu option 4 to recompile Nginx. It's a one way switch, to switch back manually edit /usr/local/nginx/modsec/modsecurity.conf and remove SecAuditLogFormat JSON setting
    - ensure rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example and rules/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example and setup removing the .example suffix so you can set exclusion ModSecurity rules in those include files

    Continue reading...

    123.09beta01 branch