WIP

2026-01-08 06:51:04 +03:00
parent 0ffc9385c3
commit de92065d22
8 changed files with 413 additions and 827 deletions
--- a/ansible/vars.yml
+++ b/ansible/vars.yml
@@ -13,6 +13,13 @@ waf:
            - "http://www1"
            - "http://www2"
            - "http://www3"
+      log_only: true
+#     paranoia_level: 1
+#     detection_paranoia_level: null
      custom_cert: true
      custom_cert_file: "/etc/ssl/certs/local.crt"
      custom_key_file: "/etc/ssl/private/local.key"
+#     exceptions:
+#       before_request:
+#         - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:1,nolog,ctl:ruleRemoveById=932160"'
+#         - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:2,nolog,ctl:ruleRemoveById=932250"'