bgwaf/example/ansible/vars/common.yml

common:

  certificates:
    country_name: "FR"
    locality_name: "Vannes"
    organization_name: "iTik"
    email_address: "ca@itik.fr"

  consul:
    domain: "itik.fr"
    datacenter: "lab"

  sites:

    - id: "test1"
      name: "test1.lab"
      paths:
        - addrs:
            - "http://www1"
            - "http://www2"
            - "http://www3"
      proxy_lb_policy: "random"
      proxy_active_checks: true
      proxy_active_checks_status: "301"
      proxy_passive_checks: false
      custom_cert: true
      custom_cert_file: "/etc/ssl/certs/test1.lab.crt"
      custom_cert_key_file: "/etc/ssl/private/test1.lab.key"
      rate_limit_events: 10
      rate_limit_window: "1m"
#     filter_whitelist: ["10.60.117.1"]
      crs_plugins:
        - "wordpress-rule-exclusions"
#     crs_exceptions:
      # Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x)
#       before_request:
#         - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"'
#       after_response:
#         - 'SecRuleUpdateTargetById 932260 "!ARGS:tag-name"'
      header_cross_origin_embedder_policy: "unsafe-none"
      header_content_security_policy:
        worker-src: "'self' blob:"
        img-src: "'self' data: https://secure.gravatar.com/avatar/ https://s.w.org/images/"
        font-src: "'self' data:"
        script-src: "'self' 'unsafe-eval'"
        script-src-elem: "'self' 'unsafe-inline'"
        style-src-attr: "'self' 'unsafe-inline'"
        style-src-elem: "'self' 'unsafe-inline'"
        frame-src: "'self' blob:"

    - id: "test2"
      name: "test2.lab"
      paths:
        - addrs:
            - "http://www4"
      custom_cert: true
      custom_cert_file: "/etc/ssl/certs/test2.lab.crt"
      custom_cert_key_file: "/etc/ssl/private/test2.lab.key"
      crs_plugins:
        - "wordpress-rule-exclusions"
      header_cross_origin_embedder_policy: "unsafe-none"
      header_content_security_policy:
        worker-src: "'self' blob:"
        img-src: "'self' data: https://secure.gravatar.com/avatar/ https://s.w.org/images/"
        font-src: "'self' data:"
        script-src: "'self' 'unsafe-eval'"
        script-src-elem: "'self' 'unsafe-inline'"
        style-src-attr: "'self' 'unsafe-inline'"
        style-src-elem: "'self' 'unsafe-inline'"
        frame-src: "'self' blob:"

    - id: "test3"
      name: "test3.lab"
      paths:
        - addrs:
            - "http://www4"
      custom_cert: true
      custom_cert_file: "/etc/ssl/certs/test3.lab.crt"
      custom_cert_key_file: "/etc/ssl/private/test3.lab.key"
      crs_plugins:
        - "wordpress-rule-exclusions"
      header_cross_origin_embedder_policy: "unsafe-none"
      header_content_security_policy:
        worker-src: "'self' blob:"
        img-src: "'self' data: https://secure.gravatar.com/avatar/ https://s.w.org/images/"
        font-src: "'self' data:"
        script-src: "'self' 'unsafe-eval'"
        script-src-elem: "'self' 'unsafe-inline'"
        style-src-attr: "'self' 'unsafe-inline'"
        style-src-elem: "'self' 'unsafe-inline'"
        frame-src: "'self' blob:"