diff --git a/README.md b/README.md index 1abab55..53d8217 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -## Status : Succeeded `(As of `[9ffd06ec85033ac24187d9e7eb28426a36c9df6c](https://github.com/minoplhy/nginquic/commit/9ffd06ec85033ac24187d9e7eb28426a36c9df6c)` at Sept 20 2022)` +## Status : Succeeded `(As of `[d3affd7f4db51cbe1273c8b76b9615bbf7d23bdc](https://github.com/minoplhy/nginquic/commit/d3affd7f4db51cbe1273c8b76b9615bbf7d23bdc)` at Nov 13 2022)` # Note to Self : This Script is using to build nginx with quic and some modules i'm currently using . @@ -8,7 +8,7 @@ This Script is using to build nginx with quic and some modules i'm currently usi OS : Debian ```shell -curl https://raw.githubusercontent.com/minoplhy/nginquic/main/build.sh | sudo bash +curl https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/build.sh | sudo bash ``` systemd Template: diff --git a/build.sh b/build.sh index 23cbe42..9687653 100644 --- a/build.sh +++ b/build.sh @@ -1,6 +1,6 @@ cd ~/ rm -rf nginquic -curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/packages.sh | bash +curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/packages.sh | bash mkdir nginquic && cd nginquic # Install Golang @@ -15,12 +15,24 @@ git clone --depth=1 https://github.com/google/boringssl cd boringssl mkdir build && cd build && cmake .. && make cd .. && cd .. + +# ModSecurity Part +git clone --depth=1 https://github.com/SpiderLabs/ModSecurity +cd ModSecurity/ +git submodule init +git submodule update +./build.sh +./configure +make +sudo make install +cd .. + cd nginx-quic -mkdir mosc && cd mosc && curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/modules.sh | bash && cd .. -curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/configure.sh | bash && make +mkdir mosc && cd mosc && curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/modules.sh | bash && cd .. +curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/configure.sh | bash && make mkdir /lib/nginx/ && mkdir /lib/nginx/modules cd objs && cp *.so /lib/nginx/modules rm /usr/sbin/nginx cp nginx /usr/sbin/nginx -curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/modules.conf > modules.conf +curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/modules.conf > modules.conf cp modules.conf /etc/nginx/modules-enabled \ No newline at end of file diff --git a/configure.sh b/configure.sh index 1692587..0b769c0 100644 --- a/configure.sh +++ b/configure.sh @@ -47,6 +47,7 @@ --add-dynamic-module=mosc/ngx_cache_purge \ --add-dynamic-module=mosc/nginx-dav-ext-module \ --add-dynamic-module=mosc/echo-nginx-module \ +--add-dynamic-module=mosc/ModSecurity-nginx \ --with-http_v3_module \ --with-stream_quic_module \ --with-http_geoip_module \ diff --git a/modules.conf b/modules.conf index 267cfc5..4dfc872 100644 --- a/modules.conf +++ b/modules.conf @@ -3,3 +3,4 @@ load_module /lib/nginx/modules/ngx_http_cache_purge_module.so; load_module /lib/nginx/modules/ngx_http_dav_ext_module.so; load_module /lib/nginx/modules/ngx_http_echo_module.so; load_module /lib/nginx/modules/ngx_http_headers_more_filter_module.so; +load_module /lib/nginx/modules/ngx_http_modsecurity_module.so; \ No newline at end of file diff --git a/modules.sh b/modules.sh index f43d586..0cb4436 100644 --- a/modules.sh +++ b/modules.sh @@ -2,4 +2,5 @@ git clone https://github.com/openresty/headers-more-nginx-module git clone https://github.com/sto/ngx_http_auth_pam_module git clone https://github.com/arut/nginx-dav-ext-module/ git clone https://github.com/openresty/echo-nginx-module -git clone https://github.com/nginx-modules/ngx_cache_purge \ No newline at end of file +git clone https://github.com/nginx-modules/ngx_cache_purge +git clone https://github.com/SpiderLabs/ModSecurity-nginx \ No newline at end of file diff --git a/packages.sh b/packages.sh index 7a4b302..65ec8ce 100644 --- a/packages.sh +++ b/packages.sh @@ -1 +1,2 @@ sudo apt-get install mercurial libunwind-dev libpcre3 libpcre3-dev zlib1g-dev cmake make libxslt1-dev libgd-dev libssl-dev libperl-dev libpam0g-dev libgeoip-dev git g++ -y +sudo apt-get install apt-utils autoconf automake build-essential libcurl4-openssl-dev liblmdb-dev libpcre++-dev libtool libxml2-dev libyajl-dev pkgconf wget