CU-251akbj added graylog and additional fixes from discovered logs

2022-04-18 03:15:52 -04:00
parent f6af7e0bb1
commit 2360c82f98
27 changed files with 324 additions and 119 deletions
--- a/ansible/roles/http/tasks/modsec.yml
+++ b/ansible/roles/http/tasks/modsec.yml
@@ -84,7 +84,8 @@
  become: true
  ansible.builtin.lineinfile:
    path: /etc/nginx/modsecurity.conf
-    regexp: "^SecRuleEngine"
-    line: "SecRuleEngine On"
+    regexp: "{{ item.regex }}"
+    line: "{{ item.line }}"
+  loop: "{{ modsec_conf_replaces }} "
  notify: restart_nginx
  tags: modsec