Skip to content

Commit

Permalink
Clean up docker
Browse files Browse the repository at this point in the history
  • Loading branch information
jawadqur committed Jan 28, 2025
1 parent b81bf5f commit fef7ed2
Showing 1 changed file with 1 addition and 19 deletions.
20 changes: 1 addition & 19 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ RUN dnf update -y && \
rm -rf /var/cache/yum

# Set working directory
WORKDIR /opt
WORKDIR /usr/src

# Clone and install ModSecurity
RUN git clone --depth 1 -b v3/master --single-branch https://github.com/SpiderLabs/ModSecurity && \
Expand Down Expand Up @@ -71,24 +71,6 @@ RUN NGINX_VERSION=$(nginx -v 2>&1 | cut -d '/' -f 2) && \
mkdir -p /etc/nginx/modules/ && \
cp objs/*.so /etc/nginx/modules

# Set up ModSecurity configuration
RUN mkdir -p /etc/nginx/modsec && \
cd /etc/nginx/modsec && \
git clone https://github.com/coreruleset/coreruleset.git && \
mv coreruleset/crs-setup.conf.example coreruleset/crs-setup.conf && \
mv coreruleset/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example \
coreruleset/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf && \
cp /opt/ModSecurity/modsecurity.conf-recommended /etc/nginx/modsec/modsecurity.conf && \
sed -i 's/SecRuleEngine DetectionOnly/SecRuleEngine On/' /etc/nginx/modsec/modsecurity.conf

# Configure Nginx to use ModSecurity
RUN echo 'load_module modules/ngx_http_modsecurity_module.so;' > /etc/nginx/modules.conf && \
echo 'modsecurity on;' > /etc/nginx/conf.d/modsecurity.conf && \
echo 'modsecurity_rules_file /etc/nginx/modsec/main.conf;' >> /etc/nginx/conf.d/modsecurity.conf && \
echo 'Include /etc/nginx/modsec/modsecurity.conf' > /etc/nginx/modsec/main.conf && \
echo 'Include /etc/nginx/modsec/coreruleset/crs-setup.conf' >> /etc/nginx/modsec/main.conf && \
echo 'Include /etc/nginx/modsec/coreruleset/rules/*.conf' >> /etc/nginx/modsec/main.conf


EXPOSE 80
STOPSIGNAL SIGTERM
Expand Down

0 comments on commit fef7ed2

Please sign in to comment.