Plugins?

[loukaniko85]

Hi Team - anyway to get modsecurity plugins to function?

-- Want to jump to this from the modsecurty-crs container, but the plugins are holding me back.

[fzipi]

What about mounting the proper directories inside the container?

[fzipi]

See https://github.com/coreruleset/coraza-crs-docker/blob/main/src/templates/Caddyfile#L24-L30 for example. You should only need to bind mount the directory where you downloaded your plugins to the /opt/coraza/owasp-crs/plugins/ directory.

[loukaniko85]

I've tried this, not sure the plugins get loaded. Same plugins folder as my modsec container, which works.

[fzipi]

Do you have nextcloud installed? Can you test?

[loukaniko85]

Of course I do; I am using the modsecurity-crs container at the moment, including the nextcloud plugin, as above, and its working as expected. Ive unmapped and remapped the plugins folder to test, and enable and disabled the plugin in the config itself. Works as expected with this container, certain features of nextcloud are denied with the plugin disabled.

Though with the coraza-crs container, doing the same tests, it never seems to be enabled and the certain features of nextcloud are always denied.

[fzipi]

Thanks for confirming! I'll check it out and see what is happening then.

[loukaniko85]

Happy to. Here if you need anything further.

[fzipi]

Did some reorganization and better output and docs in #14.

You can start testing as soon as it is merged and the new container is out!