enable modsecurity in detection only mode

ministryofjustice · Nov 12, 2024 · b0f3b35 · b0f3b35
1 parent 9be5a9e
commit b0f3b35
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/helm_deploy/values-base.yaml b/helm_deploy/values-base.yaml
@@ -86,6 +86,9 @@ datahub-frontend:
       nginx.ingress.kubernetes.io/limit-whitelist: |
         217.33.148.210/32,35.177.252.195/32,81.134.202.29/32,35.178.209.113/32,3.8.51.207/32,35.177.252.54/32,194.33.192.0/25,194.33.196.0/25,35.176.93.186/32,51.149.250.0/24,51.149.249.0/29,51.149.249.32/29,194.33.248.0/29,194.33.249.0/29,194.33.200.0/21,194.33.216.0/24,194.33.217.0/24,194.33.218.0/24,128.77.75.64/26,20.49.214.199/32,20.49.214.228/32,20.26.11.71/32,20.26.11.108/32
       nginx.ingress.kubernetes.io/limit-rps: "200"
+      nginx.ingress.kubernetes.io/enable-modsecurity: "true"
+      nginx.ingress.kubernetes.io/modsecurity-snippet: |
+        SecRuleEngine DetectionOnly
 
     tls:
       - hosts: