diff --git a/clusters/k8s01/longhorn/ingress.yaml b/clusters/k8s01/longhorn/ingress.yaml index 81f47f9983c6239f4f6c9a136e4a9c7c7dcaaf23..76c1284b5da651b833e897cbb9706ad4f47dc4cb 100644 --- a/clusters/k8s01/longhorn/ingress.yaml +++ b/clusters/k8s01/longhorn/ingress.yaml @@ -15,11 +15,7 @@ metadata: ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)") end } - nginx.ingress.kubernetes.io/enable-modsecurity: "true" - nginx.ingress.kubernetes.io/enable-owasp-core-rules: "true" nginx.ingress.kubernetes.io/modsecurity-transaction-id: $request_id - nginx.ingress.kubernetes.io/modsecurity-snippet: | - SecRuleEngine On spec: rules: - host: ENC[AES256_GCM,data:eBQRvj0E4eODWDYTXe+1iu3p+koCwHhVcxw=,iv:DR0LwShFLl9pS13VgTuCuag8qo3uKug26g9eV2AAkLE=,tag:c7MwWxEsVuV0EvckG+nKqQ==,type:str] @@ -42,8 +38,8 @@ sops: azure_kv: [] hc_vault: [] age: [] - lastmodified: "2022-03-04T19:13:47Z" - mac: ENC[AES256_GCM,data:hAmKECaw9YPNmeHjLE3V5F1jI0tEMQaPb4HE1QEuw4xsuKOoVbc8nMeAHLmEA+BC/jDWV2nhFs/EiUi8grg+taOIrzPz7XAwJns1dn1xs89SO+km16nFGHVl7E+q0VL+CoFib0Z7BtWRARDlWE1loUjcUCd+q2S7wO9WjtOoFJk=,iv:d//Y2ORQX+n81YKwD8HkafM19mGWMF8JtF6vH8sKK5Q=,tag:uiYFzOvgJqqygoVStl1oNA==,type:str] + lastmodified: "2023-09-26T16:41:54Z" + mac: ENC[AES256_GCM,data:kNEYTTpU40jMIM943lng/JtBGCsQbMXL4CNXdGh8yYtQcVPstgLrwaRejvJk4VvIOZxqFax+JxwiW+T++8u56df6ms8qmMXq/CsGBkKji4J0tLsjQI9aLZ+EDL/pnFtd9R1Q8DLBEF9ARiGLc97V/JykXUPAVWMrLqDUxGg8z5g=,iv:CA8H35S5rgSo0iBuxGHV7kK1A276bIJQfX7AR+lkhI4=,tag:8WX4Zs3X/E3rUBWGejwwBA==,type:str] pgp: - created_at: "2022-01-22T02:43:51Z" enc: |- @@ -87,4 +83,4 @@ sops: -----END PGP MESSAGE----- fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07 encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL)$ - version: 3.7.1 + version: 3.7.3