What is the recommended WAF to run in-front of Discourse? I recently succeeded in modifying the nginx config installed in the Discourse docker container to include ModSecurity and the OWASP (Open Web Application Security Project) CRS (Core Rule Set). OWASP ModSecurity Core Rule Set (CRS) So far …

Discourse + Web Application Firewall (WAF) mod_security

maltfield (Michael Altfield) November 18, 2019, 6:22am 4

related: I just found this guide from @joelradon on how to install Discourse with the NAXSI WAF in nginx before the Discourse docker container:

Topic		Replies	Views
How to run Discourse in Apache vhost, not Nginx Installation unsupported-install	30	2261	August 14, 2023
How to build a Discourse Installation with an Open Source WAF Installation unsupported-install	1	1791	October 5, 2019
Run other websites on the same machine as Discourse Self-Hosting how-to , advanced-setup	64	129443	October 7, 2024
Does Discourse container use unattended-upgrades? Hosting	9	3324	September 22, 2020
Add an offline page to display when Discourse is rebuilding or starting up Sysadmins configuring , how-to , advanced-setup	135	242104	January 5, 2024