Disable Modsecurity from interanl processing

This commit is contained in:
mley 2023-08-09 14:45:18 -07:00 committed by k8s-infra-cherrypick-robot
parent 98170bd6bf
commit ff3c608a5b

View file

@ -710,6 +710,11 @@ http {
# default server, used for NGINX healthcheck and access to nginx stats
server {
# Ensure that modsecurity will not run on an internal location as this is not accessible from outside
{{ if $modsecurityEnabled }}
modsecurity off;
{{ end }}
listen 127.0.0.1:{{ .StatusPort }};
set $proxy_upstream_name "internal";