docs(waf): _fetch_crs.sh 生成的 coraza.conf 模板指向 tuning.conf

避免重跑脚本覆盖调优配置,模板不再包含重复的阈值/偏执规则
This commit is contained in:
qing committed 2026-08-04 21:11:26 +08:00
1 parent 0700491300
commit 6a68b3393d
1 file changed
+3 -17
+3 -17
View File
@@ -114,23 +114,9 @@ SecAction \\
nolog,\\ nolog,\\
setvar:tx.crs_setup_version=${SETUP_VER}" setvar:tx.crs_setup_version=${SETUP_VER}"
# ===== 可选调优(取消注释以启用) ===== # ===== 可选调优(由 local/tuning.conf 统一管理,重跑本脚本不会覆盖) =====
# 异常评分阈值(默认 inbound=5, outbound=4) # 异常评分阈值 / 偏执等级等 CRS 调优,已移至 rules/local/tuning.conf。
# SecAction \\ # 注意:本文件由 _fetch_crs.sh 自动生成,重跑脚本会覆盖,请不要在此处修改调优。
# "id:900110,\\
# phase:1,\\
# pass,\\
# nolog,\\
# setvar:tx.inbound_anomaly_score_threshold=5,\\
# setvar:tx.outbound_anomaly_score_threshold=4"
# 偏执等级(默认 1;等级越高规则越严、误报越多)
# SecAction \\
# "id:900000,\\
# phase:1,\\
# pass,\\
# nolog,\\
# setvar:tx.blocking_paranoia_level=1"
CONFEOF CONFEOF
echo "" echo ""