Sign inSign up

congcong126/nginx-modsec

By congcong126

Updated 4 months ago

Image
0

552

congcong126/nginx-modsec repository overview

docker run -d --name nginx-modsec --network host \
   -v /data/apps/myrules/rules:/opt/owasp-crs/rules:ro \
   -v /etc/localtime:/etc/localtime:ro \
   -v /etc/nginx/conf.d:/etc/nginx/vhost \
   -v /etc/nginx/ssl:/etc/nginx/ssl \
   -v /data/apps/myrules/temp/:/var/cache/nginx/tmp/ \
   -v /var/log/nginx:/var/log/nginx \
   -e PARANOIA=1 \
   -e EXECUTING_PARANOIA=1 \
   -e ENFORCE_BODYPROC_URLENCODED=1 \
   -e ANOMALY_INBOUND=10 \
   -e ANOMALY_OUTBOUND=5 \
   -e ALLOWED_METHODS="GET POST PUT" \
   -e ALLOWED_HTTP_VERSIONS="HTTP/1.1 HTTP/2 HTTP/2.0" \
   -e MAX_NUM_ARGS=128 \
   -e ARG_NAME_LENGTH=50 \
   -e ARG_LENGTH=200 \
   -e TOTAL_ARG_LENGTH=6400 \
   -e MAX_FILE_SIZE=100000 \
   -e COMBINED_FILE_SIZES=1000000 \
   -e PROXY=1 \
   -e TIMEOUT=60 \
   -e LOGLEVEL=warn \
   -e ERRORLOG='/proc/self/fd/2' \
   -e USER=nginx \
   -e GROUP=nginx \
   -e SERVERADMIN=root@localhost \
   -e SERVERNAME=localhost \
   -e PORT=8180 \
   -e WORKER_CONNECTIONS=20480 \
   -e KEEPALIVE_TIMEOUT=600s \
   -e MODSEC_RULE_ENGINE=on \
   -e MODSEC_REQ_BODY_ACCESS=on \
   -e MODSEC_REQ_BODY_LIMIT=13107200 \
   -e MODSEC_REQ_BODY_NOFILES_LIMIT=131072 \
   -e MODSEC_RESP_BODY_ACCESS=on \
   -e MODSEC_RESP_BODY_LIMIT=524288 \
   -e MODSEC_PCRE_MATCH_LIMIT=1000 \
   -e MODSEC_PCRE_MATCH_LIMIT_RECURSION=1000 \
   -e MODSEC_DEFAULT_PHASE1_ACTION="phase:1,log,auditlog,deny,status:405" \
   -e MODSEC_DEFAULT_PHASE2_ACTION="phase:2,log,auditlog,deny,status:405" \
   -e VALIDATE_UTF8_ENCODING=1 \
   -e CRS_ENABLE_TEST_MARKER=1 \
   congcong126/nginx-modsec:4.3.0-nginx-202406090906

Tag summary

Content type

Image

Digest

sha256:a845ea675

Size

99.7 MB

Last updated

4 months ago

docker pull congcong126/nginx-modsec:4.25.0-nginx-202605200705