|
94 | 94 | # @see https://github.com/SpiderLabs/ModSecurity/wiki for additional documentation. |
95 | 95 | # |
96 | 96 | class apache::mod::security ( |
97 | | - String $logroot = $apache::params::logroot, |
98 | | - Integer $version = $apache::params::modsec_version, |
99 | | - Optional[String] $crs_package = $apache::params::modsec_crs_package, |
100 | | - Array[String] $activated_rules = $apache::params::modsec_default_rules, |
101 | | - Boolean $custom_rules = $apache::params::modsec_custom_rules, |
102 | | - Optional[Array[String]] $custom_rules_set = $apache::params::modsec_custom_rules_set, |
103 | | - String $modsec_dir = $apache::params::modsec_dir, |
104 | | - String $modsec_secruleengine = $apache::params::modsec_secruleengine, |
105 | | - String $audit_log_relevant_status = '^(?:5|4(?!04))', |
106 | | - String $audit_log_parts = $apache::params::modsec_audit_log_parts, |
107 | | - String $audit_log_type = $apache::params::modsec_audit_log_type, |
108 | | - Optional[String] $audit_log_storage_dir = undef, |
109 | | - Integer $secpcrematchlimit = $apache::params::secpcrematchlimit, |
110 | | - Integer $secpcrematchlimitrecursion = $apache::params::secpcrematchlimitrecursion, |
111 | | - String $allowed_methods = 'GET HEAD POST OPTIONS', |
112 | | - String $content_types = 'application/x-www-form-urlencoded|multipart/form-data|text/xml|application/xml|application/x-amf', |
113 | | - String $restricted_extensions = '.asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/', |
114 | | - String $restricted_headers = '/Proxy-Connection/ /Lock-Token/ /Content-Range/ /Translate/ /via/ /if/', |
115 | | - String $secdefaultaction = 'deny', |
116 | | - String $inbound_anomaly_threshold = '5', |
117 | | - String $outbound_anomaly_threshold = '4', |
118 | | - String $critical_anomaly_score = '5', |
119 | | - String $error_anomaly_score = '4', |
120 | | - String $warning_anomaly_score = '3', |
121 | | - String $notice_anomaly_score = '2', |
122 | | - String $secrequestmaxnumargs = '255', |
123 | | - String $secrequestbodylimit = '13107200', |
124 | | - String $secrequestbodynofileslimit = '131072', |
125 | | - String $secrequestbodyinmemorylimit = '131072', |
126 | | - Boolean $manage_security_crs = true, |
| 97 | + String $logroot = $apache::params::logroot, |
| 98 | + Integer $version = $apache::params::modsec_version, |
| 99 | + Optional[String] $crs_package = $apache::params::modsec_crs_package, |
| 100 | + Array[String] $activated_rules = $apache::params::modsec_default_rules, |
| 101 | + Boolean $custom_rules = $apache::params::modsec_custom_rules, |
| 102 | + Optional[Array[String]] $custom_rules_set = $apache::params::modsec_custom_rules_set, |
| 103 | + String $modsec_dir = $apache::params::modsec_dir, |
| 104 | + String $modsec_secruleengine = $apache::params::modsec_secruleengine, |
| 105 | + String $audit_log_relevant_status = '^(?:5|4(?!04))', |
| 106 | + String $audit_log_parts = $apache::params::modsec_audit_log_parts, |
| 107 | + String $audit_log_type = $apache::params::modsec_audit_log_type, |
| 108 | + Optional[String] $audit_log_storage_dir = undef, |
| 109 | + Integer $secpcrematchlimit = $apache::params::secpcrematchlimit, |
| 110 | + Integer $secpcrematchlimitrecursion = $apache::params::secpcrematchlimitrecursion, |
| 111 | + String $allowed_methods = 'GET HEAD POST OPTIONS', |
| 112 | + String $content_types = 'application/x-www-form-urlencoded|multipart/form-data|text/xml|application/xml|application/x-amf', |
| 113 | + String $restricted_extensions = '.asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/', |
| 114 | + String $restricted_headers = '/Proxy-Connection/ /Lock-Token/ /Content-Range/ /Translate/ /via/ /if/', |
| 115 | + String $secdefaultaction = 'deny', |
| 116 | + Variant[String,Integer] $inbound_anomaly_threshold = '5', |
| 117 | + Variant[String,Integer] $outbound_anomaly_threshold = '4', |
| 118 | + Variant[String,Integer] $critical_anomaly_score = '5', |
| 119 | + Variant[String,Integer] $error_anomaly_score = '4', |
| 120 | + Variant[String,Integer] $warning_anomaly_score = '3', |
| 121 | + Variant[String,Integer] $notice_anomaly_score = '2', |
| 122 | + Variant[String,Integer] $secrequestmaxnumargs = '255', |
| 123 | + Variant[String,Integer] $secrequestbodylimit = '13107200', |
| 124 | + Variant[String,Integer] $secrequestbodynofileslimit = '131072', |
| 125 | + Variant[String,Integer] $secrequestbodyinmemorylimit = '131072', |
| 126 | + Boolean $manage_security_crs = true, |
127 | 127 | ) inherits apache::params { |
128 | 128 | include apache |
129 | 129 |
|
|
0 commit comments