remove ClamAV because of GPL and started work on read-only filesystem

2021-05-26 17:18:49 +02:00
parent a8bc17e836
commit a991b262ef
24 changed files with 91 additions and 69 deletions
--- a/confs/site/modsecurity-clamav.conf
+++ b/confs/site/modsecurity-clamav.conf
@@ -1,4 +0,0 @@
-SecUploadDir /tmp
-SecUploadKeepFiles On
-SecRule FILES_TMPNAMES "@inspectFile /opt/scripts/clamav.sh" \
-"phase:2,t:none,deny,msg:'Virus found in uploaded file',id:'399999'"
--- a/confs/site/modsecurity-rules.conf
+++ b/confs/site/modsecurity-rules.conf
@@ -53,11 +53,6 @@ SecAuditEngine {{ MODSECURITY_SEC_AUDIT_ENGINE }}
 SecAuditLogType Serial
 SecAuditLog /var/log/nginx/modsec_audit.log

-# scan uploaded files with clamv
-{% if USE_CLAMAV_UPLOAD == "yes" %}
-include {{ NGINX_PREFIX }}modsecurity-clamav.conf
-{% endif %}
-
 # include OWASP CRS configuration
 {% if USE_MODSECURITY_CRS == "yes" %}
 include /opt/owasp/crs.conf
--- a/confs/site/server.conf
+++ b/confs/site/server.conf
@@ -144,8 +144,8 @@ server {
 {% endif %}

 	# brotli compression
-{% if USE_GZIP == "yes" %}
-	include {{ NGINX_PREFIX }}gzip.conf;
+{% if USE_BROTLI == "yes" %}
+	include {{ NGINX_PREFIX }}brotli.conf;
 {% endif %}

 	# maximum body size