noarch GetPageSpeed extras repository for Fedora Linux 45

Update: nginx-owasp-crs-4.30.0-1.fc45

Wed, 04 Nov 2026 02:43:20 +0000

Package: nginx-owasp-crs
Summary: OWASP ModSecurity Core Rule Set for Nginx

Description:
The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

Changes:

nginx-owasp-crs-4.30.0-1.fc45.noarch [225 KiB]

Changelog by Danila Vershinin (2026-10-03):

- Fixed path-based command injection bypass in RCE rules.
- Lowercased charset parameter to prevent allow-list bypass.
- Collected all _charset_ values to avoid shadowing.
- Fixed broken Skip Checking Responses feature.
- Added detection for Active Directory command-line tools.
- Expanded Restricted Files data and added .claude.
- Allowed application/*+json content types by default.
- Dropped util directory, removed upstream (dev-only rule tooling).

Update: nginx-all-modules-1.30.6-4.fc45.gps

Wed, 04 Nov 2026 02:32:18 +0000

Package: nginx-all-modules
Summary: A meta package that installs all base NGINX modules

Description:
Meta package that installs all available nginx modules.

Changes:

nginx-all-modules-1.30.6-4.fc45.gps.noarch [6 KiB]

(no changelog entry)

Update: nginx-honeypot-1.2.0-1.fc45

Wed, 04 Nov 2026 02:19:49 +0000

Package: nginx-honeypot
Summary: NGINX honeypot - detect malicious bots (and optionally firewall-ban them)

Description:
NGINX honeypot with lots of "honey" for bad bots. A map of bot-bait request URIs (phpMyAdmin probes, .env grabs, exploit paths) makes NGINX return 410 Gone, cutting server load and log noise. The package is config-only and needs nothing but nginx. Banning the offending IP is optional and opt-in: a free fcgiwrap + ipset path, and a Pro path that bans from one directive via nginx-module-nftset-access. Both are documented in the README.

Changes:

nginx-honeypot-1.2.0-1.fc45.noarch [22 KiB]

Changelog by Danila Vershinin (2026-10-31):

- Network mode: server-ban-nftset-network.conf logs trap hits as JSON, and the
  optional nginx-honeypot-report timer ships them to a central server.
- honey.conf: stop matching /.well-known/ paths, dot-paths in query strings and
  /actuator/health, which banned ACME validators and monitors.