nginx build with LibreSSL. Includes ModSecurity. WIP.

Deploy DVWA Webserver + ModSecurity + Scanner for researching rules. Auto deployment scripts are supported

Extract ModSecurity information from Kubernetes

Build a Docker image of NGINX with the ModSecurity Web Application Firewall extension and create and renew website certificates using the Let's Encrypt free certificate authority.

A full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache

modsecurity-waf-demo

Check if linux server is hacked, and enhance your Ubuntu server

Desenvolvimento de microserviços

🐋 hardened ubuntu server dokku | This repository contains scripts, configuration templates, and documentation used for the initial setup of a hardened Ubuntu 22.04 LTS server using the Dokku service to host websites in a secure production environment.

A collection provides roles to securely install and configure nginx.

Nginx Server with mod security

Traefik plugin to proxy requests to owasp/modsecurity-crs:3.3.5-apache-alpine

📦 Single CentOS 7 instance with Nginx + ModSecurity and OWASP

NGINX set up with ModSecurity enabled and configured with Open Web Application Security Project Core Rule Set (OWASP CRS). All running on docker.

Ansible role for installing Nginx, compiling ModSecurity3, and configuring the OWASP CRS v3 ruleset

Docker file from nginx:alpine with ModSecurity (lib v3)

Using WEB security module together with NGINX inside a container to facilitate the protection of the application, based on OWASP ModSecurity Core Rule Set rules to further improve protection.

NGINX reverse proxy using ModSecurity WAF to protect a web application

Hub for PMIS Instances