disable WAF for special collections

disable the WAF but enable logging related #5561 closes #5567
pulibrary · Nov 27, 2024 · 2b1d933 · 2b1d933
1 parent 124becb
commit 2b1d933
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/roles/nginxplus/files/conf/http/dev/library_staging.conf b/roles/nginxplus/files/conf/http/dev/library_staging.conf
@@ -34,8 +34,8 @@ server {
     ssl_prefer_server_ciphers  on;
 
     location / {
-#        # app_protect_enable on;
-#        # app_protect_security_log_enable on;
+        app_protect_enable off;
+        app_protect_security_log_enable on;
         proxy_pass http://library-staging;
         proxy_cache library-stagingcache;
         # handle errors using errors.conf

diff --git a/roles/nginxplus/files/conf/http/lib-sc-prod.conf b/roles/nginxplus/files/conf/http/lib-sc-prod.conf
@@ -32,6 +32,8 @@ server {
     ssl_prefer_server_ciphers  on;
 
     location / {
+        app_protect_enable off;
+        app_protect_security_log_enable on;
         proxy_pass http://lib-sc-prod;
         proxy_cache lib-sc-prodcache;
         proxy_connect_timeout      2h;

diff --git a/roles/nginxplus/files/conf/http/library-prod.conf b/roles/nginxplus/files/conf/http/library-prod.conf
@@ -61,6 +61,8 @@ server {
     ssl_prefer_server_ciphers  on;
 
     location / {
+        app_protect_enable off;
+        app_protect_security_log_enable on;
         proxy_pass http://library-prod;
         # handle errors using errors.conf
         proxy_intercept_errors on;