diff --git a/entrypoint/global-config.sh b/entrypoint/global-config.sh index b9208b6..378e813 100644 --- a/entrypoint/global-config.sh +++ b/entrypoint/global-config.sh @@ -65,7 +65,7 @@ fi if [ "$BLOCK_COUNTRY" != "" ] ; then echo "[*] Updating GeoIP database (in background) ..." replace_in_file "/etc/nginx/nginx.conf" "%BLOCK_COUNTRY%" "include /etc/nginx/geoip.conf;" - replace_in_file "/etc/nginx/geoip.conf" "%BLOCK_COUNTRY%" "$(echo $BLOCK_COUNTRY | sed 's/ / no;\n/g') no;" + replace_in_file "/etc/nginx/geoip.conf" "%BLOCK_COUNTRY%" "$(echo $BLOCK_COUNTRY | sed 's/ / no;\\n/g') no;" echo "0 0 2 * * /opt/scripts/geoip.sh" >> /etc/crontabs/root /opt/scripts/geoip.sh & else diff --git a/entrypoint/site-config.sh b/entrypoint/site-config.sh index 34b6a09..715fb25 100644 --- a/entrypoint/site-config.sh +++ b/entrypoint/site-config.sh @@ -16,7 +16,6 @@ if [ "$MULTISITE" = "yes" ] ; then if [ "$check" != "" ] ; then repl_name=$(echo "$name" | sed "s~${1}_~~") repl_value=$(echo "$var" | sed "s~${name}=~~") - echo "$SERVER_NAME (check ok) : $repl_name - $repl_value" read -r "$repl_name" <<< $repl_value fi done @@ -31,7 +30,6 @@ cp /opt/confs/site/* "$NGINX_PREFIX" # replace paths replace_in_file "${NGINX_PREFIX}server.conf" "%MAIN_LUA%" "include ${NGINX_PREFIX}main-lua.conf;" -replace_in_file "${NGINX_PREFIX}modsecurity.conf" "%MODSEC_RULES_FILE%" "${NGINX_PREFIX}/modsecurity-rules.conf" if [ "$MULTISITE" = "yes" ] ; then replace_in_file "${NGINX_PREFIX}server.conf" "%SERVER_CONF%" "include /server-confs/${1}/*.conf;" else @@ -234,16 +232,25 @@ fi # ModSecurity config if [ "$USE_MODSECURITY" = "yes" ] ; then + replace_in_file "${NGINX_PREFIX}modsecurity.conf" "%MODSEC_RULES_FILE%" "${NGINX_PREFIX}/modsecurity-rules.conf" replace_in_file "${NGINX_PREFIX}server.conf" "%USE_MODSECURITY%" "include ${NGINX_PREFIX}modsecurity.conf;" if ls /modsec-confs/*.conf > /dev/null 2>&1 ; then - replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_RULES%" "include /modsec-confs/*.conf" + if [ "$MULTISITE" = "yes" ] ; then + replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_RULES%" "include /modsec-confs/${1}/*.conf" + else + replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_RULES%" "include /modsec-confs/*.conf" + fi else replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_RULES%" "" fi if [ "$USE_MODSECURITY_CRS" = "yes" ] ; then replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CRS%" "include /etc/nginx/owasp-crs.conf" if ls /modsec-crs-confs/*.conf > /dev/null 2>&1 ; then - replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_CRS%" "include /modsec-crs-confs/*.conf" + if [ "$MULTISITE" = "yes" ] ; then + replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_CRS%" "include /modsec-crs-confs/${1}/*.conf" + else + replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_CRS%" "include /modsec-crs-confs/*.conf" + fi else replace_in_file "${NGINX_PREFIX}modsecurity-rules.conf" "%MODSECURITY_INCLUDE_CUSTOM_CRS%" "" fi