CU-cyk0dp Added more rules to modsecurity

2020-09-30 22:58:33 -04:00
parent 888f9dd289
commit 798c3bbb80
4 changed files with 179 additions and 35 deletions
--- a/ansible/roles/http/templates/nginx/sites/ci.bdebyl.net.https.conf.j2
+++ b/ansible/roles/http/templates/nginx/sites/ci.bdebyl.net.https.conf.j2
@@ -29,14 +29,14 @@ server {

  location / {
    modsecurity on;
-    modsecurity_rules_file {{ nginx_dir }}/modsec_includes.conf;
+    modsecurity_rules_file {{ nginx_path }}/modsec_includes.conf;

    proxy_set_header X-Forwarded-For   $remote_addr;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Host              $http_host;

    proxy_pass         http://drone;
-    proxy_redirect     off;
+    proxy_repathect     off;
    proxy_http_version 1.1;
    proxy_buffering    off;