SecRuleEngine On
SecRequestBodyAccess On

# SecPcreMatchLimit and SecPcreMatchLimitRecursion are not applicable
# to Coraza WAF's re2, so they are not needed.

# Audit log config example
SecAuditEngine RelevantOnly
SecAuditLogParts ABHZ
SecAuditLogFormat JSON
SecAuditLogType Serial
# See defence360: src/asyncclient/im360/subsys/panels/cpanel/mod_security.py
SecAuditLogDir /var/log/imunify360/modsec_audit
SecAuditLog /var/log/imunify360/modsec_audit.log
SecAuditLogRelevantStatus "^(0|[45]\d{2})"

SecArgumentSeparator &
SecCookieFormat 0
SecTmpDir /var/imunify360/tmp_modsec
SecUploadDir /var/imunify360/tmp_modsec

Include /var/imunify360/modsec/coraza/*.conf
Include /etc/imunify360-wafd/modsecurity.d/*.conf