denc-webcluster: add ModSecurity adjustments

With the rollout of our Salted configuration, ModSecurity came enforced.
This adds necessary rules to PrivateBin and BookStack for correct
operation.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

pillar/cluster/denc/web-proxy.sls

@@ -125,6 +125,11 @@ nginx:
               - proxy_pass: https://bookstack.themis.backend.syscid.com
               - proxy_http_version: 1.1
             - client_max_body_size: 20M
+            - modsecurity_rules: |-
+                '
+                SecRuleRemoveById 941160
+                SecAction "id:900200, phase:1, nolog, pass, t:none, setvar:\'tx.allowed_methods=GET HEAD POST OPTIONS PUT PATCH\'"
+                '
 
       http.conf:
         config:
@@ -147,6 +152,10 @@ nginx:
               - proxy_pass: https://privatebin.themis.backend.syscid.com
               - proxy_http_version: 1.1
             - client_max_body_size: 50M
+            - modsecurity_rules: |-
+                '
+                SecRequestBodyNoFilesLimit 50000000
+                '
 
       sso_private.conf:
         config: