WIP

ansible/roles/waf_config/defaults/main.yml

@@ -35,12 +35,14 @@ waf_config_defaults:
   custom_key_file: ""
   plugins: []
 
+  # caddy-ratelimit
   rate_events: 1000
   rate_window: "1m"
 
+  # steffenbusch/caddy-bot-barrier
   bot_barrier: false
 
-  # CRS defaults
+  # corazawaf/coraza-caddy
   log_only: false
   paranoia_level: 1
   detection_paranoia_level: null
@@ -178,6 +180,8 @@ waf_config_defaults:
     - "/x-method-override/"
     - "/x-middleware-subrequest/"
     - "/expect/"
+  restricted_headers_extended:
+    - "/accept-charset/"
   allowed_http_versions:
     - "HTTP/1.0"
     - "HTTP/1.1"
@@ -185,8 +189,6 @@ waf_config_defaults:
     - "HTTP/2.0"
     - "HTTP/3"
     - "HTTP/3.0"
-  restricted_headers_extended:
-    - "/accept-charset/"
   allowed_request_content_type_charset:
     - "|utf-8|"
     - "|iso-8859-1|"