Something went wrong. Try again.
What happens if I push all of nixpkgs
Something went wrong. Try again.
3.1 kB · 115 lines
Nix
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116{ lib, stdenv, fetchFromGitHub, autoreconfHook, bison, flex, pkg-config, curl, geoip, libmaxminddb, libxml2, lmdb, lua, pcre, pcre2, ssdeep, yajl, nixosTests,}:
stdenv.mkDerivation rec { pname = "libmodsecurity"; version = "3.0.14";
src = fetchFromGitHub { owner = "owasp-modsecurity"; repo = "ModSecurity"; rev = "v${version}"; hash = "sha256-SaeBO3+WvPhHiJoiOmijB0G3/QYxjAdxgeCVqESS+4U="; fetchSubmodules = true; };
nativeBuildInputs = [ autoreconfHook bison flex pkg-config ]; buildInputs = [ curl geoip libmaxminddb libxml2 lmdb lua pcre pcre2 ssdeep yajl ];
outputs = [ "out" "dev" ];
configureFlags = [ "--enable-parser-generation" "--disable-doxygen-doc" "--with-curl=${curl.dev}" "--with-libxml=${libxml2.dev}" "--with-lmdb=${lmdb.out}" "--with-maxmind=${libmaxminddb}" "--with-pcre=${pcre.dev}" "--with-pcre2=${pcre2.out}" "--with-ssdeep=${ssdeep}" ];
postPatch = '' substituteInPlace build/lmdb.m4 \ --replace "\''${path}/include/lmdb.h" "${lmdb.dev}/include/lmdb.h" \ --replace "lmdb_inc_path=\"\''${path}/include\"" "lmdb_inc_path=\"${lmdb.dev}/include\"" substituteInPlace build/pcre2.m4 \ --replace "/usr/local/pcre2" "${pcre2.out}/lib" \ --replace "\''${path}/include/pcre2.h" "${pcre2.dev}/include/pcre2.h" \ --replace "pcre2_inc_path=\"\''${path}/include\"" "pcre2_inc_path=\"${pcre2.dev}/include\"" substituteInPlace build/ssdeep.m4 \ --replace "/usr/local/libfuzzy" "${ssdeep}/lib" \ --replace "\''${path}/include/fuzzy.h" "${ssdeep}/include/fuzzy.h" \ --replace "ssdeep_inc_path=\"\''${path}/include\"" "ssdeep_inc_path=\"${ssdeep}/include\"" substituteInPlace modsecurity.conf-recommended \ --replace "SecUnicodeMapFile unicode.mapping 20127" "SecUnicodeMapFile $out/share/modsecurity/unicode.mapping 20127" '';
postInstall = '' mkdir -p $out/share/modsecurity cp ${src}/{AUTHORS,CHANGES,LICENSE,README.md,modsecurity.conf-recommended,unicode.mapping} $out/share/modsecurity '';
enableParallelBuilding = true;
passthru.tests = { nginx-modsecurity = nixosTests.nginx-modsecurity; };
meta = with lib; { homepage = "https://github.com/owasp-modsecurity/ModSecurity"; description = '' ModSecurity v3 library component. ''; longDescription = '' Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity SecRules format and apply them to HTTP content provided by your application via Connectors. ''; license = licenses.asl20; platforms = platforms.all; maintainers = with maintainers; [ izorkin ]; mainProgram = "modsec-rules-check"; };}