Nginx-full package with ModSecurity enabled

schunckt · September 1, 2025, 3:05pm

Hi team!
I'm using nginx (installed nginx-full package) which works quite nice.
Meanwhile I figured out that ModSecurity is missing. Could someone provide the exact configure options and compile environement, then I could give it a try to add that module?

Another option - someone improve the "nginx-full" package with that feature?

Thanks!

T.

brada4 · September 1, 2025, 3:21pm

Take for example openresty lua module - start here, there are other sections with extra conf files and module files to install/package.

github.com/openwrt/packages

net/nginx/Makefile

7be94fac3


      
          endef
          
          define Download/nginx-mod-naxsi
            SOURCE_DATE:=2022-09-14
            SOURCE_VERSION:=d714f1636ea49a9a9f4f06dba14aee003e970834
            URL:=https://github.com/nbs-system/naxsi.git
            MIRROR_HASH:=b0cef5fbf842f283eb5f0686ddd1afcd07d83abd7027c8cfb3e84a2223a34797
            PROTO:=git
          endef
          
          define Download/nginx-mod-lua
            SOURCE_DATE:=2023-08-19
            SOURCE_VERSION:=c89469e920713d17d703a5f3736c9335edac22bf
            URL:=https://github.com/openresty/lua-nginx-module.git
            MIRROR_HASH:=c3bdf1b23f0a63991b5dcbd1f8ee150e6f893b43278e8600e4e0bb42a6572db4
            PROTO:=git
          endef
          
          define Download/nginx-mod-lua-resty-core
            SOURCE_DATE:=2023-09-09
            SOURCE_VERSION:=2e2b2adaa61719972fe4275fa4c3585daa0dcd84

schunckt · September 2, 2025, 8:18am

Thanks, I'll give it a try. Need to setup the build env first

schunckt · September 16, 2025, 10:33am

Works now.
There was no need to modify nginx itself because it's enabled for dynamic modules.

Was a little tricky because I had to compile modSecurity and the nginx connector against musl.

Thanks!

T.

system · September 26, 2025, 10:34am

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.