@@ -5,19 +5,19 @@ nginx_app_protect_waf_enable: true
5
5
# Specify whether or not this role should install the NGINX App Protect DoS product.
6
6
nginx_app_protect_dos_enable : false
7
7
8
- # Specify whether you want to maintain your version of NGINX App Protect WAF, upgrade to the latest version, or remove NGINX App Protect WAF.
9
- # Using 'present ' will install the latest version of NGINX App Protect WAF on a fresh install.
10
- # Using 'latest ' will upgrade NGINX App Protect WAF to the latest version on every playbook execution.
11
- # Using 'absent ' will remove NGINX App Protect WAF from your system.
12
- # Default is present .
13
- nginx_app_protect_waf_state : present
14
-
15
- # Specify whether you want to maintain your version of NGINX App Protect DoS, upgrade to the latest version, or remove NGINX App Protect DoS.
16
- # Using 'present ' will install the latest version of NGINX App Protect DoS on a fresh install.
17
- # Using 'latest ' will upgrade NGINX App Protect DoS to the latest version on every playbook execution.
18
- # Using 'absent ' will remove NGINX App Protect DoS from your system.
19
- # Default is present .
20
- nginx_app_protect_dos_state : present
8
+ # Specify whether you want to install NGINX App Protect WAF, upgrade to the latest version, or remove NGINX App Protect WAF.
9
+ # Using 'install ' will install the latest version of NGINX App Protect WAF on a fresh install.
10
+ # Using 'upgrade ' will upgrade NGINX App Protect WAF to the latest version of NGINX App Protect WAF on every playbook execution.
11
+ # Using 'uninstall ' will remove NGINX App Protect WAF from your system.
12
+ # Default is install .
13
+ nginx_app_protect_waf_setup : install
14
+
15
+ # Specify whether you want to install NGINX App Protect DoS, upgrade to the latest version, or remove NGINX App Protect DoS.
16
+ # Using 'install ' will install the latest version of NGINX App Protect DoS on a fresh install.
17
+ # Using 'upgrade ' will upgrade NGINX App Protect DoS to the latest version of NGINX App Protect DoS on every playbook execution.
18
+ # Using 'uninstall ' will remove NGINX App Protect DoS from your system.
19
+ # Default is install .
20
+ nginx_app_protect_dos_setup : install
21
21
22
22
# If you have a RHEL subscription, NGINX App Protect WAF's dependencies will use subscription repos.
23
23
# Otherwise, it will source packages from CentOS' repositories.
@@ -27,16 +27,16 @@ nginx_app_protect_use_rhel_subscription_repos: false
27
27
# The installation of NGINX App Protect WAF includes a base signature set, which may be out of date.
28
28
# This option installs the latest NGINX App Protect signatures.
29
29
# Default is true.
30
- nginx_app_protect_install_signatures : true
30
+ nginx_app_protect_waf_install_signatures : true
31
31
32
32
# (Optional) Installs a specific version of the NGINX App Protect WAF attack signatures package
33
33
# Default is to install the latest release.
34
- # nginx_app_protect_signatures_version : "=2019.07.16-1" # <- Example value for Debian/Ubuntu
34
+ # nginx_app_protect_waf_signatures_version : "=2019.07.16-1" # <- Example value for Debian/Ubuntu
35
35
36
36
# The installation of NGINX App Protect WAF can include a page of frequently-updated, high-accuracy signatures called "threat campaigns".
37
37
# This option installs the latest NGINX App Protect WAF threat campaigns signatures.
38
38
# Default is true.
39
- nginx_app_protect_install_threat_campaigns : true
39
+ nginx_app_protect_waf_install_threat_campaigns : true
40
40
41
41
# (Optional) Installs a specific version of the NGINX App Protect WAF threat campaigns package
42
42
# Default is to install the latest release.
@@ -46,25 +46,35 @@ nginx_app_protect_install_threat_campaigns: true
46
46
# Default settings are the official NGINX signing key hosts.
47
47
# nginx_app_protect_signing_key:
48
48
# nginx_plus: https://cs.nginx.com/static/keys/nginx_signing.key
49
- # security_updates : https://cs.nginx.com/static/keys/app-protect-security-updates.key
49
+ # waf_security_updates : https://cs.nginx.com/static/keys/app-protect-security-updates.key
50
50
51
- # Specify whether or not you want to manage the NGINX App Protect repositories.
52
- # Using 'true' will manage NGINX App Protect repositories.
53
- # Using 'false' will not manage the NGINX App Protect repositories, allowing them to be managed through other means.
51
+ # Specify whether or not you want to manage the NGINX App Protect WAF repositories.
52
+ # Using 'true' will manage NGINX App Protect WAF repositories.
53
+ # Using 'false' will not manage the NGINX App Protect WAF repositories, allowing them to be managed through other means.
54
54
# Default is true
55
- nginx_app_protect_manage_repo : true
55
+ nginx_app_protect_waf_manage_repo : true
56
+
57
+ # Specify whether or not you want to manage the NGINX App Protect DoS repositories.
58
+ # Using 'true' will manage NGINX App Protect DoS repositories.
59
+ # Using 'false' will not manage the NGINX App Protect DoS repositories, allowing them to be managed through other means.
60
+ # Default is true
61
+ nginx_app_protect_dos_manage_repo : true
56
62
57
63
# (Optional) Specify repository for NGINX Plus.
58
64
# Defaults are the official NGINX repositories.
59
65
# nginx_plus_repository: deb [arch=amd64] https://pkgs.nginx.com/plus/debian buster nginx-plus
60
66
61
- # (Optional) Specify repository for NGINX App Protect.
67
+ # (Optional) Specify repository for NGINX App Protect WAF.
68
+ # Defaults are the official NGINX repositories.
69
+ # nginx_app_protect_waf_repository: deb [arch=amd64 signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] https://pkgs.nginx.com/app-protect/debian buster nginx-plus
70
+
71
+ # (Optional) Specify repository for NGINX App Protect WAF security updates.
62
72
# Defaults are the official NGINX repositories.
63
- # nginx_app_protect_repository : deb [arch=amd64] https://pkgs .nginx.com/app-protect /debian buster nginx-plus
73
+ # nginx_app_protect_waf_security_updates_repository : deb [arch=amd64 signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg ] https://app-protect-security-updates .nginx.com/debian buster nginx-plus
64
74
65
- # (Optional) Specify repository for NGINX App Protect security updates .
75
+ # (Optional) Specify repository for NGINX App Protect DoS .
66
76
# Defaults are the official NGINX repositories.
67
- # nginx_app_protect_security_updates_repository : deb [arch=amd64] https://app-protect-security-updates .nginx.com/debian buster nginx-plus
77
+ # nginx_app_protect_dos_repository : deb [arch=amd64 signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg ] https://pkgs .nginx.com/app-protect-dos /debian buster nginx-plus
68
78
69
79
# Location of your NGINX App Protect license in your local machine.
70
80
# Default is the files folder within the NGINX Ansible role.
0 commit comments