From ff3c608a5b1eb48e1528b4f7a952c58f49e3658b Mon Sep 17 00:00:00 2001 From: mley Date: Wed, 9 Aug 2023 14:45:18 -0700 Subject: [PATCH] Disable Modsecurity from interanl processing --- rootfs/etc/nginx/template/nginx.tmpl | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl index b18a8da4d..9d1a21a3c 100644 --- a/rootfs/etc/nginx/template/nginx.tmpl +++ b/rootfs/etc/nginx/template/nginx.tmpl @@ -710,6 +710,11 @@ http { # default server, used for NGINX healthcheck and access to nginx stats server { + # Ensure that modsecurity will not run on an internal location as this is not accessible from outside + {{ if $modsecurityEnabled }} + modsecurity off; + {{ end }} + listen 127.0.0.1:{{ .StatusPort }}; set $proxy_upstream_name "internal";