Verified Commit 983a4ab9 authored by tr's avatar tr
Browse files

Install coreruleset 3.3.0

parent 66d1f96b
Pipeline #4810 passed with stages
in 15 minutes and 54 seconds
......@@ -58,6 +58,7 @@ FROM centos:8
ENV MODSECURITY_VERSION 3.0.4
ENV MODSECURITY_NGINX_VERSION 1.0.1
ENV CORERULESET 3.3.0
RUN cd /usr/local/src && \
dnf update -y && \
......@@ -76,6 +77,14 @@ COPY --from=builder /usr/local/src/ngx_http_modsecurity_module.so /usr/lib64/ngi
COPY nginx.conf /etc/nginx/
COPY server.conf /etc/nginx/conf.d/default.conf
COPY modsecurity /etc/modsecurity
RUN curl -L https://github.com/coreruleset/coreruleset/archive/v$CORERULESET.tar.gz \
-o /tmp/coreruleset.tar.gz && \
tar -zxC /etc/modsecurity -f /tmp/coreruleset.tar.gz && \
rm -f /tmp/coreruleset.tar.gz && \
mv /etc/modsecurity/coreruleset-$CORERULESET /etc/modsecurity/coreruleset && \
mv /etc/modsecurity/coreruleset/crs-setup.conf.example /etc/modsecurity/coreruleset/crs-setup.conf
RUN mkdir -p /var/log/nginx && \
mkdir -p /etc/modsecurity/rules && \
ln -sf /dev/stdout /var/log/nginx/access.log && \
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment