From deaea0b14d73558eaefd9065800392693f443d19 Mon Sep 17 00:00:00 2001 From: Bastian de Byl Date: Fri, 2 Oct 2020 22:41:03 -0400 Subject: [PATCH] ansible_fixes Moved whitelisting to before_crs_rules --- ansible/roles/http/tasks/modsec.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ansible/roles/http/tasks/modsec.yml b/ansible/roles/http/tasks/modsec.yml index e13d9a0..aa62128 100644 --- a/ansible/roles/http/tasks/modsec.yml +++ b/ansible/roles/http/tasks/modsec.yml @@ -71,7 +71,7 @@ - name: whitelist local ip addresses become: true lineinfile: - path: "{{ nginx_path }}/modsecurity.conf" + path: "{{ modsec_crs_before_rule_conf }}" regexp: "{{ modsec_whitelist_local_re }}" line: "{{ modsec_whitelist_local }}" mode: 0644