docker run -d --name nginx-modsec --network host \
-v /data/apps/myrules/rules:/opt/owasp-crs/rules:ro \
-v /etc/localtime:/etc/localtime:ro \
-v /etc/nginx/conf.d:/etc/nginx/vhost \
-v /etc/nginx/ssl:/etc/nginx/ssl \
-v /data/apps/myrules/temp/:/var/cache/nginx/tmp/ \
-v /var/log/nginx:/var/log/nginx \
-e PARANOIA=1 \
-e EXECUTING_PARANOIA=1 \
-e ENFORCE_BODYPROC_URLENCODED=1 \
-e ANOMALY_INBOUND=10 \
-e ANOMALY_OUTBOUND=5 \
-e ALLOWED_METHODS="GET POST PUT" \
-e ALLOWED_HTTP_VERSIONS="HTTP/1.1 HTTP/2 HTTP/2.0" \
-e MAX_NUM_ARGS=128 \
-e ARG_NAME_LENGTH=50 \
-e ARG_LENGTH=200 \
-e TOTAL_ARG_LENGTH=6400 \
-e MAX_FILE_SIZE=100000 \
-e COMBINED_FILE_SIZES=1000000 \
-e PROXY=1 \
-e TIMEOUT=60 \
-e LOGLEVEL=warn \
-e ERRORLOG='/proc/self/fd/2' \
-e USER=nginx \
-e GROUP=nginx \
-e SERVERADMIN=root@localhost \
-e SERVERNAME=localhost \
-e PORT=8180 \
-e WORKER_CONNECTIONS=20480 \
-e KEEPALIVE_TIMEOUT=600s \
-e MODSEC_RULE_ENGINE=on \
-e MODSEC_REQ_BODY_ACCESS=on \
-e MODSEC_REQ_BODY_LIMIT=13107200 \
-e MODSEC_REQ_BODY_NOFILES_LIMIT=131072 \
-e MODSEC_RESP_BODY_ACCESS=on \
-e MODSEC_RESP_BODY_LIMIT=524288 \
-e MODSEC_PCRE_MATCH_LIMIT=1000 \
-e MODSEC_PCRE_MATCH_LIMIT_RECURSION=1000 \
-e MODSEC_DEFAULT_PHASE1_ACTION="phase:1,log,auditlog,deny,status:405" \
-e MODSEC_DEFAULT_PHASE2_ACTION="phase:2,log,auditlog,deny,status:405" \
-e VALIDATE_UTF8_ENCODING=1 \
-e CRS_ENABLE_TEST_MARKER=1 \
congcong126/nginx-modsec:4.3.0-nginx-202406090906
Content type
Image
Digest
sha256:a845ea675…
Size
99.7 MB
Last updated
4 months ago
docker pull congcong126/nginx-modsec:4.25.0-nginx-202605200705