https://github.com/marknjunge/docker-nginx-modsecurity
NGINX set up with ModSecurity enabled and configured with Open Web Application Security Project Core Rule Set (OWASP CRS). All running on docker.
https://github.com/marknjunge/docker-nginx-modsecurity
docker modsecurity modsecurity-nginx nginx nginx-docker owasp owasp-crs-core-rule-set
Last synced: 3 months ago
JSON representation
NGINX set up with ModSecurity enabled and configured with Open Web Application Security Project Core Rule Set (OWASP CRS). All running on docker.
- Host: GitHub
- URL: https://github.com/marknjunge/docker-nginx-modsecurity
- Owner: MarkNjunge
- License: mit
- Created: 2019-10-16T16:14:24.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2019-10-16T16:14:43.000Z (over 5 years ago)
- Last Synced: 2025-02-15T07:29:07.891Z (4 months ago)
- Topics: docker, modsecurity, modsecurity-nginx, nginx, nginx-docker, owasp, owasp-crs-core-rule-set
- Language: Shell
- Size: 7.81 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.MD
- License: LICENSE
Awesome Lists containing this project
README
# Docker + NGINX + ModSecurity + OWASP CRS
NGINX set up with ModSecurity enabled and configured with Open Web Application Security Project Core Rule Set (OWASP CRS). All running on docker.
```
docker run --name nginx-modsec -d -p 80:80 marknjunge/nginx-modsec
```
## Installation
```bash
git clone https://marknjunge.com/nginx-modsec.git
cd nginx-modsec
docker build -t marknjunge/nginx-modsec
or
./build.sh
```
**Note:** Building takes a while (even up to 15 minutes) because of compiling ModSecurity. Unless you have reason not to, it's better to use my image `marknjunge/nginx-modsec` as a base and copy your own config files.
## Usage
```
docker run --name nginx-modsec -d -p 80:80 marknjunge/nginx-modsec
```
## NGINX Configuration
To modify NGINX Configuration, edit [./nginx/nginx.conf](./nginx/nginx.conf) and [./nginx/conf.d/](./nginx/conf.d/).
## ModSecurity Configuration
ModSecurity is pre-configured with [OWASP CRS](https://www.owasp.org/index.php/Category:OWASP_ModSecurity_Core_Rule_Set_Project).
To add your own rules, modify [./modsec/main.conf](./modsec/main.conf).