Merge pull request 'denc-webcluster: add ModSecurity adjustments' (#30) from import-denc-webcluster-nginx-modsec into production

Reviewed-on: #30

pillar/cluster/denc/web-proxy.sls

@@ -125,6 +125,11 @@ nginx:
               - proxy_pass: https://bookstack.themis.backend.syscid.com
               - proxy_http_version: 1.1
             - client_max_body_size: 20M
+            - modsecurity_rules: |-
+                '
+                SecRuleRemoveById 941160
+                SecAction "id:900200, phase:1, nolog, pass, t:none, setvar:\'tx.allowed_methods=GET HEAD POST OPTIONS PUT PATCH\'"
+                '
 
       http.conf:
         config:
@@ -147,6 +152,10 @@ nginx:
               - proxy_pass: https://privatebin.themis.backend.syscid.com
               - proxy_http_version: 1.1
             - client_max_body_size: 50M
+            - modsecurity_rules: |-
+                '
+                SecRequestBodyNoFilesLimit 50000000
+                '
 
       sso_private.conf:
         config: