2026-01-07 14:27:55 +03:00
|
|
|
vault:
|
|
|
|
|
ca:
|
|
|
|
|
passphrase: "plopplop"
|
|
|
|
|
consul:
|
|
|
|
|
secret_key: "MZu7pu72IxVkGzSjkB0ZGd+RTp5n34ByxOoxB+BKaSc="
|
|
|
|
|
|
|
|
|
|
waf:
|
|
|
|
|
sites:
|
|
|
|
|
- name: "test"
|
|
|
|
|
site: "test.lab"
|
|
|
|
|
paths:
|
|
|
|
|
- addrs:
|
|
|
|
|
- "http://www1"
|
|
|
|
|
- "http://www2"
|
|
|
|
|
- "http://www3"
|
2026-01-08 06:51:04 +03:00
|
|
|
log_only: true
|
|
|
|
|
# paranoia_level: 1
|
|
|
|
|
# detection_paranoia_level: null
|
2026-01-07 14:27:55 +03:00
|
|
|
custom_cert: true
|
|
|
|
|
custom_cert_file: "/etc/ssl/certs/local.crt"
|
|
|
|
|
custom_key_file: "/etc/ssl/private/local.key"
|
2026-01-08 06:51:04 +03:00
|
|
|
# exceptions:
|
|
|
|
|
# before_request:
|
|
|
|
|
# - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:1,nolog,ctl:ruleRemoveById=932160"'
|
|
|
|
|
# - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:2,nolog,ctl:ruleRemoveById=932250"'
|
