update config

nginxinc · Sep 20, 2024 · 84c8c11 · 84c8c11
1 parent 780aee6
commit 84c8c11
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 3 deletions.
diff --git a/terraform/deployments/with-web-application-firewall/main.tf b/terraform/deployments/with-web-application-firewall/main.tf
@@ -57,18 +57,29 @@ worker_processes auto;
 worker_rlimit_nofile 8192;
 pid /run/nginx/nginx.pid;
 
+load_module modules/ngx_http_app_protect_module.so;
+
 events {
     worker_connections 4000;
 }
 
 error_log /var/log/nginx/error.log error;
 
 http {
+    app_protect_enforcer_address 127.0.0.1:50000;
+
     server {
         listen 80 default_server;
-        server_name localhost;
+
         location / {
-            return 200 'Hello World';
+            app_protect_enable on;
+            app_protect_policy_file /etc/app_protect/conf/NginxDefaultPolicy.tgz;
+            proxy_pass http://127.0.0.1:80/proxy/$request_uri;
+        }
+
+        location /proxy {
+            default_type text/html;
+            return 200 "Hello World\n";
         }
     }
 }

diff --git a/terraform/deployments/with-web-application-firewall/variables.tf b/terraform/deployments/with-web-application-firewall/variables.tf
@@ -10,7 +10,7 @@ variable "name" {
 
 variable "sku" {
   description = "SKU of NGINXaaS deployment."
-  default     = "standard_Monthly"
+  default     = "standardv2_Monthly"
 }
 
 variable "tags" {