mod_security: configure mod_security

base_role.json

{
  "name": "base",
  "chef_type": "role",
  "json_class": "Chef::Role",
  "description": "The base role for our test",
  "run_list": [
    "recipe[chef-client]",
    "recipe[apache2]",
    "recipe[mod_security]"
  ],
  "override_attributes": {
    "mod_security": {
      "rule_engine": "On",
      "pcre_match_limit":"160000",
      "pcre_match_limit_recursion":"160000",
      "crs": {
        "rules":{
          "base": {
            "modsecurity_crs_35_bad_robots":false
          },
          "slr": {
            "modsecurity_crs_46_slr_et_joomla_attacks":true,
            "modsecurity_crs_46_slr_et_lfi_attacks":true,
            "modsecurity_crs_46_slr_et_phpbb_attacks":true,
            "modsecurity_crs_46_slr_et_rfi_attacks":true,
            "modsecurity_crs_46_slr_et_wordpress_attacks":true,
            "modsecurity_crs_46_slr_et_xss_attacks":true,
            "modsecurity_crs_46_slr_et_sqli_attacks":true
          },
          "optional":{
            "modsecurity_crs_43_csrf_protection":true
          }  
        }
      }
    }
  }
}