modsecurity-docker

modsecurity-docker copied to clipboard

Signed-off-by: Felipe Zipitria Add GHA for scans using Trivy.

fzipi

Consider using extended format for logging

1

@dune73 suggested to use the extended log format as described here: https://www.netnea.com/cms/apache-tutorial-5_extending-access-log/#step_4_configuring_the_new,_extended_log_format. Variables are described here: https://www.netnea.com/cms/apache-tutorial-6_embedding-modsecurity/#step_5_creating_the_base_configuration. ``` LogFormat "%h %{GEOIP_COUNTRY_CODE}e %u [%{%Y-%m-%d %H:%M:%S}t.%{usec_frac}t] \"%r\" %>s %b \ \"%{Referer}i\" \"%{User-Agent}i\"...

theseion

Adding a docker HEALTHCHECK should simplify testing and also running in k8s and other orchestrators.

fzipi