Until there is solid support for ModSecurity from the Nextcloud project itself, I can’t recommend using it. hi, i just introduced modsecurity2 on one of our debian7 (plesk12) nodes and i am testing comodo’s rulesets. This post is the #2 result when searching for “nextcloud modsecurity.” ( #1 is an outdated version of the EXCLUSION-RULES.) Support seems to be non-existent, and as each major update seems to need a new set of rules, trying to run ModSecurity with Nextcloud is a exercise in frustration. There’s no mention of ModSecurity in the Nextcloud documentation, and the NC distribution doesn’t include an nf updated for the current version of the server. I don’t have time to run down all the broken rules and fix them. No, pulling the latest exclusion rules from Github doesn’t fix it.Įventually, I took the blue pill and added SecRuleEngine off to that VirtualHost. Whereas gotroot decided to go to a paid version of mod security rules this has left low margin web hosts and a bit out in the cold. I just spent most of the weekend trying to setup NC 21 on Debian Buster with the ModSecurity rules from the Buster repos.

Modsecurity comodo