From 6a68b3393d258e3d994c5f46eb6df7fb129c2457 Mon Sep 17 00:00:00 2001
From: qing <1776177662@qq.com>
Date: Tue, 4 Aug 2026 21:11:26 +0800
Subject: [PATCH] =?UTF-8?q?docs(waf):=20=5Ffetch=5Fcrs.sh=20=E7=94=9F?=
 =?UTF-8?q?=E6=88=90=E7=9A=84=20coraza.conf=20=E6=A8=A1=E6=9D=BF=E6=8C=87?=
 =?UTF-8?q?=E5=90=91=20tuning.conf?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

避免重跑脚本覆盖调优配置，模板不再包含重复的阈值/偏执规则
---
 waf/_fetch_crs.sh | 20 +++-----------------
 1 file changed, 3 insertions(+), 17 deletions(-)

diff --git a/waf/_fetch_crs.sh b/waf/_fetch_crs.sh
index 32f87f3..547826d 100755
--- a/waf/_fetch_crs.sh
+++ b/waf/_fetch_crs.sh
@@ -114,23 +114,9 @@ SecAction \\
     nolog,\\
     setvar:tx.crs_setup_version=${SETUP_VER}"
 
-# ===== 可选调优（取消注释以启用） =====
-# 异常评分阈值（默认 inbound=5, outbound=4）
-# SecAction \\
-#     "id:900110,\\
-#     phase:1,\\
-#     pass,\\
-#     nolog,\\
-#     setvar:tx.inbound_anomaly_score_threshold=5,\\
-#     setvar:tx.outbound_anomaly_score_threshold=4"
-
-# 偏执等级（默认 1；等级越高规则越严、误报越多）
-# SecAction \\
-#     "id:900000,\\
-#     phase:1,\\
-#     pass,\\
-#     nolog,\\
-#     setvar:tx.blocking_paranoia_level=1"
+# ===== 可选调优（由 local/tuning.conf 统一管理，重跑本脚本不会覆盖） =====
+# 异常评分阈值 / 偏执等级等 CRS 调优，已移至 rules/local/tuning.conf。
+# 注意：本文件由 _fetch_crs.sh 自动生成，重跑脚本会覆盖，请不要在此处修改调优。
 CONFEOF
 
 echo ""