diff --git a/internal/ingress/controller/template/template.go b/internal/ingress/controller/template/template.go index ae5ec259a..d8d275caa 100644 --- a/internal/ingress/controller/template/template.go +++ b/internal/ingress/controller/template/template.go @@ -1530,6 +1530,9 @@ func buildModSecurityForLocation(cfg config.Configuration, location *ingress.Loc %v '; `, location.ModSecurity.Snippet)) + } else { + buffer.WriteString(`modsecurity_rules_file /etc/nginx/modsecurity/modsecurity.conf; +`) } if location.ModSecurity.TransactionID != "" { @@ -1537,11 +1540,6 @@ func buildModSecurityForLocation(cfg config.Configuration, location *ingress.Loc `, location.ModSecurity.TransactionID)) } - if !isMSEnabled { - buffer.WriteString(`modsecurity_rules_file /etc/nginx/modsecurity/modsecurity.conf; -`) - } - if !cfg.EnableOWASPCoreRules && location.ModSecurity.OWASPRules { buffer.WriteString(`modsecurity_rules_file /etc/nginx/owasp-modsecurity-crs/nginx-modsecurity.conf; `)