49 lines
1.6 KiB
YAML
49 lines
1.6 KiB
YAML
common:
|
|
|
|
certificates:
|
|
country_name: "FR"
|
|
locality_name: "Vannes"
|
|
organization_name: "iTik"
|
|
email_address: "ca@itik.fr"
|
|
|
|
consul:
|
|
domain: "itik.fr"
|
|
datacenter: "lab"
|
|
|
|
sites:
|
|
- id: "test"
|
|
name: "test.lab"
|
|
paths:
|
|
- addrs:
|
|
- "http://www1"
|
|
- "http://www2"
|
|
- "http://www3"
|
|
proxy_lb_policy: "random"
|
|
proxy_active_checks: true
|
|
proxy_active_checks_status: "301"
|
|
proxy_passive_checks: false
|
|
custom_cert: true
|
|
custom_cert_file: "/etc/ssl/certs/test.lab.crt"
|
|
custom_cert_key_file: "/etc/ssl/private/test.lab.key"
|
|
rate_limit_events: 10
|
|
rate_limit_window: "1m"
|
|
# filter_whitelist: ["10.60.117.1"]
|
|
crs_plugins:
|
|
- "wordpress-rule-exclusions"
|
|
# crs_exceptions:
|
|
# Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x)
|
|
# before_request:
|
|
# - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"'
|
|
# after_response:
|
|
# - 'SecRuleUpdateTargetById 932260 "!ARGS:tag-name"'
|
|
header_cross_origin_embedder_policy: "unsafe-none"
|
|
header_content_security_policy:
|
|
worker-src: "'self' blob:"
|
|
img-src: "'self' data: https://secure.gravatar.com/avatar/ https://s.w.org/images/"
|
|
font-src: "'self' data:"
|
|
script-src: "'self' 'unsafe-eval'"
|
|
script-src-elem: "'self' 'unsafe-inline'"
|
|
style-src-attr: "'self' 'unsafe-inline'"
|
|
style-src-elem: "'self' 'unsafe-inline'"
|
|
frame-src: "'self' blob:"
|