{"id":39869,"date":"2024-05-02T10:06:18","date_gmt":"2024-05-02T10:06:18","guid":{"rendered":"https:\/\/accuweb.cloud\/resource\/?post_type=faq&p=39869"},"modified":"2026-02-19T06:59:09","modified_gmt":"2026-02-19T06:59:09","slug":"how-to-setup-modsecurity-with-nginx-server","status":"publish","type":"faq","link":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server","title":{"rendered":"How to Set Up ModSecurity Web Application Firewall with NGINX Server?"},"content":{"rendered":"

How to Set Up ModSecurity Web Application Firewall with NGINX Server?<\/h2>\n

An open-source web application firewall (WAF) that runs on several platforms is called ModSecurity. It aids in identifying and thwarting web application attacks. This module can strengthen server security by thwarting popular exploits like code injection. It contains guidelines for guarding against trojans, malicious user agents, SQL injection, cross-site scripting, and other attacks.<\/p>\n

Discover<\/a> the basic security for applications with the NGINX load balancer<\/p>\n

ModSecurity is pre-installed on AccuWeb.Cloud<\/a> certified NGINX stacks, which comprise load balancers<\/a> and application servers. Take these actions to activate this feature on your containers:<\/p>\n

Step 1.<\/strong> To load the shared NGINX module for ModSecurity, uncomment the corresponding line in the \/etc\/nginx\/nginx.conf file.<\/p>\n

<\/div>\n
\r\n#load_module modules\/ngx_http_modsecurity_module.so;<\/strong><\/code><\/pre>\n
<\/div>\n
\"Uncomment<\/a><\/p>\n
Save the changes made to the file.<\/p>\n
Step 2.<\/strong> Then, in the configuration file found at \/etc\/nginx\/nginx.conf<\/strong> for the NGINX application server stack (or, in our case, \/etc\/nginx\/nginx-jelastic.conf<\/strong> for the load balancer), you can activate ModSecurity by deleting the ‘#’<\/strong> symbol from the designated lines.<\/p>\n
<\/div>\n
\r\n#modsecurity on;<\/strong>\r\n#modsecurity_rules_file \/etc\/nginx\/conf.d\/modsecurity\/modsec_includes.conf;<\/strong><\/code><\/pre>\n
<\/div>\n
\"Activate<\/a><\/p>\n
Remember to save the file after making your adjustments.<\/p>\n
Step 3.<\/strong> According to the configuration file at \/etc\/nginx\/conf.d\/modsecurity\/modsec_includes.conf<\/strong>, a default OWASP ModSecurity Core Rule Set (CRS) is included. This set offers general protection against common vulnerabilities typically found in web applications.<\/p>\n
\"Core<\/a><\/p>\n
You can also upload your custom rule files (with a .conf extension) to the \/etc\/nginx\/conf.d\/modsecurity\/owasp-modsecurity-crs\/rules<\/strong> folder if necessary.<\/p>\n
\t\t
\n\t\t\t        
\n            \n                        
\n                    
\n        
\n                    \n        \t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\n        <\/div>\n                    <\/div>\n        <\/section>\n        \t\t<\/div>\n\t\t<\/div>\n
<\/div>\n
Step 4.<\/strong> After making these changes, remember to restart the relevant NGINX node to apply all the customizations.<\/p>\n
\"Restart<\/a><\/p>\n
Step 5.<\/strong> Now that ModSecurity is protecting your application, you can confirm that it’s active by running the command `nginx -V<\/strong>` on the node (for example, through Web SSH) and checking for the ModSecurity module in the output list.<\/p>\n
\"Running<\/a><\/p>\n
Step 6.<\/strong> You can test ModSecurity by simulating an attack on your application. For instance, try adding the `\/?q=”><script>alert(1)<\/script>`<\/strong> string to your domain environment. If ModSecurity is functioning correctly, you should see a 403 error page, and the action will be logged in the error log file.<\/p>\n
\"Test<\/a><\/p>\n
ModSecurity is up and running, protecting your online application.<\/p>\n
Know more<\/a> about how to use load balancing for highly available applications.<\/p>\n
Start a free trial now to use AccuWeb.Cloud platform for high-level protection while managing your projects.<\/p>\n
\t\t
\n\t\t\t        
\n            \n                        
\n                    
\n        
\n                    \n        \t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\n        <\/div>\n                    <\/div>\n        <\/section>\n        \t\t<\/div>\n\t\t<\/div>\n
<\/div>\n","protected":false},"author":1,"featured_media":52879,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","class_list":["post-39869","faq","type-faq","status-publish","has-post-thumbnail","hentry","faq_topics-kb","faq_topics-load-balancer","faq_topics-nginx","faq_topics-nginx-modsecurity","faq_topics-product-documentation"],"yoast_head":"\nSetup ModSecurity with NGINX | AccuWeb.Cloud guide<\/title>\n<meta name=\"description\" content=\"Learn how to set up a ModSecurity l with an NGINX server and protect your web applications from common vulnerabilities and attacks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Set Up ModSecurity Web Application Firewall with NGINX Server?\" \/>\n<meta property=\"og:description\" content=\"Learn how to set up a ModSecurity l with an NGINX server and protect your web applications from common vulnerabilities and attacks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\" \/>\n<meta property=\"og:site_name\" content=\"AccuWeb Cloud\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-19T06:59:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#article\",\"isPartOf\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\"},\"author\":{\"name\":\"Jilesh Patadiya\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58\"},\"headline\":\"How to Set Up ModSecurity Web Application Firewall with NGINX Server?\",\"datePublished\":\"2024-05-02T10:06:18+00:00\",\"dateModified\":\"2026-02-19T06:59:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\"},\"wordCount\":403,\"publisher\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#organization\"},\"image\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage\"},\"thumbnailUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\",\"url\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\",\"name\":\"Setup ModSecurity with NGINX | AccuWeb.Cloud guide\",\"isPartOf\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage\"},\"image\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage\"},\"thumbnailUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"datePublished\":\"2024-05-02T10:06:18+00:00\",\"dateModified\":\"2026-02-19T06:59:09+00:00\",\"description\":\"Learn how to set up a ModSecurity l with an NGINX server and protect your web applications from common vulnerabilities and attacks.\",\"breadcrumb\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage\",\"url\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"contentUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/accuweb.cloud\/resource\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Set Up ModSecurity Web Application Firewall with NGINX Server?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#website\",\"url\":\"https:\/\/accuweb.cloud\/resource\/\",\"name\":\"AccuWeb Cloud\",\"description\":\"Cutting Edge Cloud Computing\",\"publisher\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/accuweb.cloud\/resource\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#organization\",\"name\":\"AccuWeb.Cloud\",\"url\":\"https:\/\/accuweb.cloud\/resource\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg\",\"contentUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg\",\"width\":156,\"height\":87,\"caption\":\"AccuWeb.Cloud\"},\"image\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58\",\"name\":\"Jilesh Patadiya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g\",\"caption\":\"Jilesh Patadiya\"},\"description\":\"Jilesh Patadiya, the visionary Co-Founder and Chief Technology Officer (CTO) behind AccuWeb.Cloud. Founder & CTO at AccuWebHosting.com. He shares his web hosting insights on the AccuWeb.Cloud blog. He mostly writes on the latest web hosting trends, WordPress, storage technologies, and Windows and Linux hosting platforms.\",\"sameAs\":[\"https:\/\/accuweb.cloud\/resource\",\"https:\/\/www.facebook.com\/accuwebhosting\",\"https:\/\/www.instagram.com\/accuwebhosting\/\",\"https:\/\/www.linkedin.com\/company\/accuwebhosting\/\",\"https:\/\/x.com\/accuwebhosting\",\"https:\/\/www.youtube.com\/c\/Accuwebhosting\"],\"url\":\"https:\/\/accuweb.cloud\/resource\/author\/accuwebadmin\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Setup ModSecurity with NGINX | AccuWeb.Cloud guide","description":"Learn how to set up a ModSecurity l with an NGINX server and protect your web applications from common vulnerabilities and attacks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server","og_locale":"en_US","og_type":"article","og_title":"How to Set Up ModSecurity Web Application Firewall with NGINX Server?","og_description":"Learn how to set up a ModSecurity l with an NGINX server and protect your web applications from common vulnerabilities and attacks.","og_url":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server","og_site_name":"AccuWeb Cloud","article_modified_time":"2026-02-19T06:59:09+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#article","isPartOf":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server"},"author":{"name":"Jilesh Patadiya","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58"},"headline":"How to Set Up ModSecurity Web Application Firewall with NGINX Server?","datePublished":"2024-05-02T10:06:18+00:00","dateModified":"2026-02-19T06:59:09+00:00","mainEntityOfPage":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server"},"wordCount":403,"publisher":{"@id":"https:\/\/accuweb.cloud\/resource\/#organization"},"image":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage"},"thumbnailUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","inLanguage":"en-US"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server","url":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server","name":"Setup ModSecurity with NGINX | AccuWeb.Cloud guide","isPartOf":{"@id":"https:\/\/accuweb.cloud\/resource\/#website"},"primaryImageOfPage":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage"},"image":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage"},"thumbnailUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","datePublished":"2024-05-02T10:06:18+00:00","dateModified":"2026-02-19T06:59:09+00:00","description":"Learn how to set up a ModSecurity l with an NGINX server and protect your web applications from common vulnerabilities and attacks.","breadcrumb":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#primaryimage","url":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","contentUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/accuweb.cloud\/resource\/articles\/how-to-setup-modsecurity-with-nginx-server#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/accuweb.cloud\/resource\/"},{"@type":"ListItem","position":2,"name":"How to Set Up ModSecurity Web Application Firewall with NGINX Server?"}]},{"@type":"WebSite","@id":"https:\/\/accuweb.cloud\/resource\/#website","url":"https:\/\/accuweb.cloud\/resource\/","name":"AccuWeb Cloud","description":"Cutting Edge Cloud Computing","publisher":{"@id":"https:\/\/accuweb.cloud\/resource\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/accuweb.cloud\/resource\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/accuweb.cloud\/resource\/#organization","name":"AccuWeb.Cloud","url":"https:\/\/accuweb.cloud\/resource\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/","url":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg","contentUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg","width":156,"height":87,"caption":"AccuWeb.Cloud"},"image":{"@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58","name":"Jilesh Patadiya","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g","caption":"Jilesh Patadiya"},"description":"Jilesh Patadiya, the visionary Co-Founder and Chief Technology Officer (CTO) behind AccuWeb.Cloud. Founder & CTO at AccuWebHosting.com. He shares his web hosting insights on the AccuWeb.Cloud blog. He mostly writes on the latest web hosting trends, WordPress, storage technologies, and Windows and Linux hosting platforms.","sameAs":["https:\/\/accuweb.cloud\/resource","https:\/\/www.facebook.com\/accuwebhosting","https:\/\/www.instagram.com\/accuwebhosting\/","https:\/\/www.linkedin.com\/company\/accuwebhosting\/","https:\/\/x.com\/accuwebhosting","https:\/\/www.youtube.com\/c\/Accuwebhosting"],"url":"https:\/\/accuweb.cloud\/resource\/author\/accuwebadmin"}]}},"_links":{"self":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq\/39869","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq"}],"about":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/types\/faq"}],"author":[{"embeddable":true,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/comments?post=39869"}],"version-history":[{"count":13,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq\/39869\/revisions"}],"predecessor-version":[{"id":53325,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq\/39869\/revisions\/53325"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/media\/52879"}],"wp:attachment":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/media?parent=39869"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}