LibertaCasa/salt
LibertaCasa/salt
9
1
Fork 0
Code Issues 5 Pull Requests Releases Activity

Merge pull request 'denc-webcluster: add ModSecurity adjustments' (#30) from import-denc-webcluster-nginx-modsec into production
All checks were successful
ci/lysergic/push/pipeline Pipeline was successful
Details

Browse Source 
Reviewed-on: #30
This commit is contained in:
Georg Pfuetzenreuter 2023-02-13 01:06:56 +01:00
commit 2c2a37ef8b
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pillar/cluster/denc/web-proxy.sls
View File

@ -125,6 +125,11 @@ nginx:
- proxy_pass: https://bookstack.themis.backend.syscid.com - proxy_pass: https://bookstack.themis.backend.syscid.com
- proxy_http_version: 1.1 - proxy_http_version: 1.1
- client_max_body_size: 20M - client_max_body_size: 20M
- modsecurity_rules: |-
'
SecRuleRemoveById 941160
SecAction "id:900200, phase:1, nolog, pass, t:none, setvar:\'tx.allowed_methods=GET HEAD POST OPTIONS PUT PATCH\'"
'
http.conf: http.conf:
config: config:
@ -147,6 +152,10 @@ nginx:
- proxy_pass: https://privatebin.themis.backend.syscid.com - proxy_pass: https://privatebin.themis.backend.syscid.com
- proxy_http_version: 1.1 - proxy_http_version: 1.1
- client_max_body_size: 50M - client_max_body_size: 50M
- modsecurity_rules: |-
'
SecRequestBodyNoFilesLimit 50000000
'
sso_private.conf: sso_private.conf:
config: config: