What is the recommended WAF to run in-front of Discourse? I recently succeeded in modifying the nginx config installed in the Discourse docker container to include ModSecurity and the OWASP (Open Web Application Security Project) CRS (Core Rule Set). OWASP ModSecurity Core Rule Set (CRS) So far …

Discourse + Web Application Firewall (WAF) mod_security

maltfield (Michael Altfield) November 18, 2019, 6:22am 4

related: I just found this guide from @joelradon on how to install Discourse with the NAXSI WAF in nginx before the Discourse docker container:

Topic		Replies	Views
How to run Discourse in Apache vhost, not Nginx Installation unsupported-install	30	2266	August 14, 2023
How to build a Discourse Installation with an Open Source WAF Installation unsupported-install	1	1792	October 5, 2019
Run other websites on the same machine as Discourse Self-Hosting how-to , advanced-setup	64	129694	October 7, 2024
Does Discourse container use unattended-upgrades? Hosting	9	3325	September 22, 2020
Add an offline page to display when Discourse is rebuilding or starting up Sysadmins configuring , how-to , advanced-setup	135	242149	January 5, 2024