vault:
  ca:
    passphrase: "plopplop"
  consul:
    secret_key: "MZu7pu72IxVkGzSjkB0ZGd+RTp5n34ByxOoxB+BKaSc="

waf:
  sites:
    - name: "test"
      site: "test.lab"
      paths:
        - addrs:
            - "http://www1"
            - "http://www2"
            - "http://www3"
      log_only: true
#     paranoia_level: 1
#     detection_paranoia_level: null
      custom_cert: true
      custom_cert_file: "/etc/ssl/certs/local.crt"
      custom_key_file: "/etc/ssl/private/local.key"
#     exceptions:
#       before_request:
#         - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:1,nolog,ctl:ruleRemoveById=932160"'
#         - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:2,nolog,ctl:ruleRemoveById=932250"'