mirror of
https://github.com/potats0/lua-resty-coraza.git
synced 2025-06-28 17:41:00 +03:00
56 lines
1.1 KiB
Markdown
56 lines
1.1 KiB
Markdown
# lua-resty-coraza
|
|
|
|
## Name
|
|
|
|
Lua implementation of the [libcoraza](https://github.com/corazawaf/libcoraza) for modsecurity Web Application Firewall.
|
|
|
|
|
|
## Installation
|
|
|
|
```bash
|
|
luarocks install lua-resty-t1k
|
|
```
|
|
|
|
## Synopsis
|
|
|
|
```lua
|
|
|
|
init_worker_by_lua_block{
|
|
coraza = require "resty.coraza"
|
|
waf = coraza.create_waf()
|
|
-- add rule from file
|
|
coraza.rules_add_file(waf, "%s/t/coraza.conf")
|
|
|
|
-- your corerule set, add rule from directive
|
|
coraza.rules_add(waf, "Include %s/t/coreruleset/crs-setup.conf.example")
|
|
coraza.rules_add(waf, "Include %s/t/coreruleset/rules/*.conf")
|
|
}
|
|
|
|
location /t {
|
|
access_by_lua_block {
|
|
coraza.do_create_transaction(waf)
|
|
coraza.do_access_filter()
|
|
coraza.do_interrupt()
|
|
}
|
|
|
|
content_by_lua_block {
|
|
ngx.say("passed")
|
|
}
|
|
|
|
header_filter_by_lua_block{
|
|
coraza.do_header_filter()
|
|
coraza.do_interrupt()
|
|
}
|
|
|
|
log_by_lua_block{
|
|
coraza.do_log()
|
|
coraza.do_free_transaction()
|
|
}
|
|
}
|
|
```
|
|
|
|
if you need more log for debug, please turn on the debug on nginx.
|
|
|
|
```
|
|
error_log logs/error.log debug;
|
|
``` |