What is the recommended WAF to run in-front of Discourse? I recently succeeded in modifying the nginx config installed in the Discourse docker container to include ModSecurity and the OWASP (Open Web Application Security Project) CRS (Core Rule Set). OWASP ModSecurity Core Rule Set (CRS) So far …

Discourse + Web Application Firewall (WAF) mod_security

codinghorror (Jeff Atwood) November 17, 2019, 6:27pm 3

This is a bad idea and it is not recommended. The benefit of this type of thing for a JavaScript app is extremely limited and it adds significant complexity to your hosting setup.

6 Likes

Xhr search requests return 406

Topic		Replies	Views
How to run Discourse in Apache vhost, not Nginx Installation unsupported-install	30	2266	August 14, 2023
How to build a Discourse Installation with an Open Source WAF Installation unsupported-install	1	1792	October 5, 2019
Run other websites on the same machine as Discourse Self-Hosting how-to , advanced-setup	64	129694	October 7, 2024
Does Discourse container use unattended-upgrades? Hosting	9	3325	September 22, 2020
Add an offline page to display when Discourse is rebuilding or starting up Sysadmins configuring , how-to , advanced-setup	135	242150	January 5, 2024

Discourse + Web Application Firewall (WAF) mod_security

Related topics