diff options
| author |   Stephen Wong <stephen.kf.wong@gmail.com> | 2018-09-05 05:03:24 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@opnfv.org> | 2018-09-05 05:03:25 +0000 |
| commit | 05873b82e85d913838dc7aed9a21bc99a713a92d (patch) | |
| tree | c459e76c659de259a2c04cf1dd34b9d57313a1fa /samples/services/modsecurity/docker/docker-entrypoint.sh | |
| parent | 420759bf152ce60da2152ec06c44f70f144d1d79 (diff) | |
| parent | 09f09a34328079f04d372ff5fb7faf9e180cc7e4 (diff) | |
Merge "Modsecurity as a service"
Diffstat (limited to 'samples/services/modsecurity/docker/docker-entrypoint.sh')
| -rw-r--r-- | samples/services/modsecurity/docker/docker-entrypoint.sh | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/samples/services/modsecurity/docker/docker-entrypoint.sh b/samples/services/modsecurity/docker/docker-entrypoint.sh new file mode 100644 index 0000000..e8e3013 --- /dev/null +++ b/samples/services/modsecurity/docker/docker-entrypoint.sh @@ -0,0 +1,15 @@ +#!/bin/bash +python -c "import re;import os;out=re.sub('(#SecAction[\S\s]*id:900000[\s\S]*paranoia_level=1\")','SecAction \\\\\n \"id:900000, \\\\\n phase:1, \\\\\n nolog, \\\\\n pass, \\\\\n t:none, \\\\\n setvar:tx.paranoia_level='+os.environ['PARANOIA']+'\"',open('/etc/apache2/modsecurity.d/owasp-crs/crs-setup.conf','r').read());open('/etc/apache2/modsecurity.d/owasp-crs/crs-setup.conf','w').write(out)" && \ +python -c "import re;import os;out=re.sub('(#SecAction[\S\s]*id:900330[\s\S]*total_arg_length=64000\")','SecAction \\\\\n \"id:900330, \\\\\n phase:1, \\\\\n nolog, \\\\\n pass, \\\\\n t:none, \\\\\n setvar:tx.total_arg_length=64000\"',open('/etc/apache2/modsecurity.d/owasp-crs/crs-setup.conf','r').read());open('/etc/apache2/modsecurity.d/owasp-crs/crs-setup.conf','w').write(out)" && \ + +if [ ! -z $PROXY ]; then + if [ $PROXY -eq 1 ]; then + APACHE_ARGUMENTS='-D crs_proxy' + if [ -z "$UPSTREAM" ]; then + export UPSTREAM=$(/sbin/ip route | grep ^default | perl -pe 's/^.*?via ([\d.]+).*/$1/g'):81 + fi + fi +fi + + +exec "$@" $APACHE_ARGUMENTS |