Discover Centmin Mod today
Register Now

Beta Branch update optional Nginx ModSecurity setup routine in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Dec 18, 2021.

  1. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    11:09 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    update optional Nginx ModSecurity setup routine in 123.09beta01

    - add option to switch to ModSecurity JSOn log format setting SecAuditLogFormat JSON when NGINX_MODSECURITY_JSONLOGS='y' combined with NGINX_MODSECURITY='y' variables are set in persistent config file /etc/centminmod/custom_config.inc prior to running centmin.sh menu option 4 to recompile Nginx. It's a one way switch, to switch back manually edit /usr/local/nginx/modsec/modsecurity.conf and remove SecAuditLogFormat JSON setting
    - ensure rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example and rules/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example and setup removing the .example suffix so you can set exclusion ModSecurity rules in those include files


    Continue reading...

    123.09beta01 branch