dipcode/nginx-waf repository overview

## Nginx envs ##
ACCESSLOG=/var/log/nginx/access.log 
ERRORLOG=/var/log/nginx/error.log
LOGLEVEL=warn
TIMEOUT=60s 
WORKER_CONNECTIONS=1024 

## ModSecurity envs ##
#
# Only activate on development or staging environment.
# Audit logging negatively affects ModSecurity performance.
MODSEC_AUDIT=Off 
MODSEC_AUDIT_LOG_FORMAT=JSON
MODSEC_AUDIT_LOG_TYPE=Serial
MODSEC_AUDIT_LOG=/dev/stdout
MODSEC_AUDIT_STORAGE=/var/log/modsecurity/audit/
MODSEC_DATA_DIR=/tmp/modsecurity/data
MODSEC_DEBUG_LOG=/dev/null
MODSEC_DEBUG_LOGLEVEL=0
MODSEC_PCRE_MATCH_LIMIT_RECURSION=100000
MODSEC_PCRE_MATCH_LIMIT=100000
MODSEC_REQ_BODY_ACCESS=On
MODSEC_REQ_BODY_LIMIT=13107200
MODSEC_REQ_BODY_NOFILES_LIMIT=131072
MODSEC_RESP_BODY_ACCESS=On
MODSEC_RESP_BODY_LIMIT=1048576
MODSEC_RULE_ENGINE=On
MODSEC_TMP_DIR=/tmp/modsecurity/tmp
MODSEC_UPLOAD_DIR=/tmp/modsecurity/upload

## System envs ##
LD_LIBRARY_PATH=/lib:/usr/lib:/usr/local/lib
TZ=Europe/Lisbon