starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-25 09:25:55 +03:00

[GH-ISSUE #3134] 🧐 Confused: Is `nginx` build with `modsecurity`? #2125

New issue

Open

opened 2026-02-26 07:34:07 +03:00 by kerem · 5 comments

kerem commented

2026-02-26 07:34:07 +03:00

Owner

Originally created by @Backpackstudio on GitHub (Aug 16, 2023).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3134

Both the documentation and the conversations and issues in the GitHub repository are unclear about modsecurity.

Checklist

Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
- Yes
Are you sure you're not using someone else's docker image?
- Yes
Have you searched for similar issues (both open and closed)?
- Yes

Describe the bug

Both the documentation and the conversations and issues in the GitHub repository are unclear.

Remember that the documentation is an integral aspect of the product. Users make costly mistakes due to incorrect setups because of inaccurate or missing documentation.

Nginx Proxy Manager Version

v2.10.4

To Reproduce

Search site modsecurity site:nginxproxymanager.com, no answer.

Expected behavior

Documentation states clearly, is nginx build with modsecurity or not.

If not, then what user can to do, for having it?

Originally created by @Backpackstudio on GitHub (Aug 16, 2023). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/3134 Both the documentation and the conversations and issues in the GitHub repository are unclear about `modsecurity`. ## Checklist - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - Yes - Are you sure you're not using someone else's docker image? - Yes - Have you searched for similar issues (both open and closed)? - Yes ## Describe the bug Both the documentation and the conversations and issues in the GitHub repository are unclear. **Remember that the documentation is an integral aspect of the product.** Users make costly mistakes due to incorrect setups because of inaccurate or missing documentation. ## Nginx Proxy Manager Version v2.10.4 ## To Reproduce Search site `modsecurity site:nginxproxymanager.com`, no answer. ## Expected behavior Documentation states clearly, is `nginx` build with `modsecurity` or not. If not, then what user can to do, for having it?

kerem added the

stale

bug

labels

2026-02-26 07:34:07 +03:00

kerem commented

2026-02-26 07:34:08 +03:00

Author

Owner

@Mainfrezzer commented on GitHub (Aug 17, 2023):

nginx -V
nginx version: openresty/1.21.4.2
built by gcc 8.3.0 (Debian 8.3.0-6) 
built with OpenSSL 1.1.1n  15 Mar 2022
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx/nginx --with-cc-opt=-O2 --add-module=../ngx_devel_kit-0.3.2 --add-module=../echo-nginx-module-0.63 --add-module=../xss-nginx-module-0.06 --add-module=../ngx_coolkit-0.2 --add-module=../set-misc-nginx-module-0.33 --add-module=../form-input-nginx-module-0.12 --add-module=../encrypted-session-nginx-module-0.09 --add-module=../srcache-nginx-module-0.33 --add-module=../ngx_lua-0.10.25 --add-module=../ngx_lua_upstream-0.07 --add-module=../headers-more-nginx-module-0.34 --add-module=../array-var-nginx-module-0.06 --add-module=../memc-nginx-module-0.19 --add-module=../redis2-nginx-module-0.15 --add-module=../redis-nginx-module-0.3.9 --add-module=../rds-json-nginx-module-0.16 --add-module=../rds-csv-nginx-module-0.09 --add-module=../ngx_stream_lua-0.0.13 --with-ld-opt=-Wl,-rpath,/etc/nginx/luajit/lib --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-stream

I hope that answers the question.

But im not quite sure why youre looking for an EOL product.
If you do want to have it, you do have to set it up and build the docker image yourself.

@Mainfrezzer commented on GitHub (Aug 17, 2023): ``` nginx -V nginx version: openresty/1.21.4.2 built by gcc 8.3.0 (Debian 8.3.0-6) built with OpenSSL 1.1.1n 15 Mar 2022 TLS SNI support enabled configure arguments: --prefix=/etc/nginx/nginx --with-cc-opt=-O2 --add-module=../ngx_devel_kit-0.3.2 --add-module=../echo-nginx-module-0.63 --add-module=../xss-nginx-module-0.06 --add-module=../ngx_coolkit-0.2 --add-module=../set-misc-nginx-module-0.33 --add-module=../form-input-nginx-module-0.12 --add-module=../encrypted-session-nginx-module-0.09 --add-module=../srcache-nginx-module-0.33 --add-module=../ngx_lua-0.10.25 --add-module=../ngx_lua_upstream-0.07 --add-module=../headers-more-nginx-module-0.34 --add-module=../array-var-nginx-module-0.06 --add-module=../memc-nginx-module-0.19 --add-module=../redis2-nginx-module-0.15 --add-module=../redis-nginx-module-0.3.9 --add-module=../rds-json-nginx-module-0.16 --add-module=../rds-csv-nginx-module-0.09 --add-module=../ngx_stream_lua-0.0.13 --with-ld-opt=-Wl,-rpath,/etc/nginx/luajit/lib --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-stream ``` I hope that answers the question. But im not quite sure why youre looking for an EOL product. If you do want to have it, you do have to set it up and build the docker image yourself.

kerem commented

2026-02-26 07:34:08 +03:00

Author

Owner

@celevra commented on GitHub (Nov 30, 2023):

Modsecurity isnt eol

@celevra commented on GitHub (Nov 30, 2023): Modsecurity isnt eol

kerem commented

2026-02-26 07:34:08 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Jun 1, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

@github-actions[bot] commented on GitHub (Jun 1, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:

kerem commented

2026-02-26 07:34:08 +03:00

Author

Owner

@PathToLife commented on GitHub (Jul 17, 2024):

Modsecurity isnt eol

Confirmed not EOL (however removed apache support i think from the owasp github readme)
https://owasp.org/blog/2024/01/09/ModSecurity.html

Active nginx development here:
https://github.com/owasp-modsecurity/ModSecurity

@PathToLife commented on GitHub (Jul 17, 2024): > Modsecurity isnt eol Confirmed not EOL (however removed apache support i think from the owasp github readme) https://owasp.org/blog/2024/01/09/ModSecurity.html Active nginx development here: https://github.com/owasp-modsecurity/ModSecurity

kerem commented

2026-02-26 07:34:08 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Feb 28, 2025):

Issue is now considered stale. If you want to keep it open, please comment 👍

@github-actions[bot] commented on GitHub (Feb 28, 2025): Issue is now considered stale. If you want to keep it open, please comment :+1:

kerem referenced this issue

2026-02-26 08:31:00 +03:00

[PR #2125] [MERGED] Bump async from 3.2.0 to 3.2.4 in /test #3537

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#2125

No description provided.

Rows
Columns

[GH-ISSUE #3134] 🧐 Confused: Is nginx build with modsecurity? #2125

Checklist

Describe the bug

Nginx Proxy Manager Version

To Reproduce

Expected behavior

[GH-ISSUE #3134] 🧐 Confused: Is `nginx` build with `modsecurity`? #2125