No upstream

[aeroclown]

So here is a question for you guys. I have nginx setup on a server and it is the core webservice daemon for sites on it. I am not using it as a proxy to another nginx instance or as a proxy to apache. What would one use for upstream, I do pass off to php-fpm but that is specific to that type of page content. Based on what I am seeing it seems as though the current implementation expects nginx to operate as a proxy. I would like to use modsecurity but I don't have need of a second nginx instance or a reverse proxy setup.

[rcbarnett-zz]

You don't have to use a proxy config in the Nginx conf file. You could do this -

server {
listen 80;
server_name localhost;

location / {
ModSecurityEnabled on;
ModSecurityConfig modsecurity.conf;
}

}