agebhar1/system-design-playground
GitHub: agebhar1/system-design-playground
基于 Vagrant 和 Ansible 的 nginx + ModSecurity WAF 安全防护实验环境,用于学习 Web 应用防火墙配置和系统架构实践。
Stars: 0 | Forks: 0
# 系统设计演练场
## 构建
```
$ vagrant up
$ ansible-playbook webservers.yml
…
$ curl 192.168.56.{2,3}
Welcome to nginx!
403 Forbidden
nginx/1.26.3
…
```
## 链接
- https://coreruleset.org/
- https://github.com/SpiderLabs/ModSecurity
- https://github.com/SpiderLabs/ModSecurity-nginx
- https://nginx.org/en/download.html
- https://nginx.org/en/docs/njs/
- https://github.com/nginx/njs-examples
- https://nginx.org/en/docs/njs/typescript.html
- https://www.nginx.com/blog/compiling-and-installing-modsecurity-for-open-source-nginx/
- https://www.nginx.com/blog/deploying-nginx-plus-as-an-api-gateway-part-1/
- https://www.nginx.com/resources/wiki/start/topics/examples/logrotation/
- https://www.digitalocean.com/community/tutorials/how-to-configure-logging-and-log-rotation-in-nginx-on-an-ubuntu-vps
- https://www.englert.one/logrotate-tutorial
- https://bellard.org/quickjs/
- https://documentation.suse.com/smart/systems-management/html/systemd-working-with-timers/index.html
- https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html
- https://www.freedesktop.org/software/systemd/man/latest/systemd.timer.html
Welcome to nginx!
If you see this page, the nginx web server is successfully installed and working. Further configuration is required.
For online documentation and support please refer to
nginx.org.
Commercial support is available at
nginx.com.
Thank you for using nginx.
… $ curl -H 'User-Agent: nessus' -H 'X-Request-ID: 1' 192.168.56.{2,3}403 Forbidden
标签:Ansible, DevOps, ModSecurity, Nginx, Vagrant, WAF, Web服务器, 系统设计, 配置修复