[Question] Do I need to download any ruleset?

[dannykorpan]

Hi,

I'm using Caddyserver through a docker-compose.yml and a custom build via a Dockerfile to enable Coraza-Caddy. If I'm incorporating this, for example, from your configuration, into my custom Caddyfile, do I need to mount the rulesets via a Docker volume?

:8080 {
 coraza_waf {
  load_owasp_crs
  directives `
   Include @coraza.conf-recommended
   Include @crs-setup.conf.example
   Include @owasp_crs/*.conf
   SecRuleEngine On
  `
 }

 reverse_proxy httpbin:8081
}

Kind regards and thanks in advance
Danny

[jcchavezs]

Nope, by using load_owasp_crs you already load CRS

[ti-guru]

@jcchavezs How would you install plugins? I would like to add the Nextcloud rule exclusion plugin.

[jcchavezs]

Good question. If you want to include plugins you need to have in your FS and use the `Include` directive.

…

On Sat, May 4, 2024 at 1:36 PM ti-guru ***@***.***> wrote: @jcchavezs <https://github.com/jcchavezs> How would you install plugins <https://coreruleset.org/docs/concepts/plugins/#how-to-install-a-plugin>? I would like to add the Nextcloud rule exclusion plugin <https://github.com/coreruleset/nextcloud-rule-exclusions-plugin>. — Reply to this email directly, view it on GitHub <#143 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAXOYAR4GUSI2LLGU4LLQKTZATB4DAVCNFSM6AAAAABFHJY4N2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOJUGEZTAOBQGM> . You are receiving this because you were mentioned.Message ID: ***@***.***>