From 84c8c11ed96ca04ca44c825040d2c5f340656a16 Mon Sep 17 00:00:00 2001
From: Arpith Varghese <a.varghese@f5.com>
Date: Fri, 20 Sep 2024 15:30:19 -0700
Subject: [PATCH] update config

---
 .../with-web-application-firewall/main.tf         | 15 +++++++++++++--
 .../with-web-application-firewall/variables.tf    |  2 +-
 2 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/terraform/deployments/with-web-application-firewall/main.tf b/terraform/deployments/with-web-application-firewall/main.tf
index 6b5e242..1b6d0e6 100644
--- a/terraform/deployments/with-web-application-firewall/main.tf
+++ b/terraform/deployments/with-web-application-firewall/main.tf
@@ -57,6 +57,8 @@ worker_processes auto;
 worker_rlimit_nofile 8192;
 pid /run/nginx/nginx.pid;
 
+load_module modules/ngx_http_app_protect_module.so;
+
 events {
     worker_connections 4000;
 }
@@ -64,11 +66,20 @@ events {
 error_log /var/log/nginx/error.log error;
 
 http {
+    app_protect_enforcer_address 127.0.0.1:50000;
+
     server {
         listen 80 default_server;
-        server_name localhost;
+
         location / {
-            return 200 'Hello World';
+            app_protect_enable on;
+            app_protect_policy_file /etc/app_protect/conf/NginxDefaultPolicy.tgz;
+            proxy_pass http://127.0.0.1:80/proxy/$request_uri;
+        }
+
+        location /proxy {
+            default_type text/html;
+            return 200 "Hello World\n";
         }
     }
 }
diff --git a/terraform/deployments/with-web-application-firewall/variables.tf b/terraform/deployments/with-web-application-firewall/variables.tf
index 3fa327a..be81ffa 100644
--- a/terraform/deployments/with-web-application-firewall/variables.tf
+++ b/terraform/deployments/with-web-application-firewall/variables.tf
@@ -10,7 +10,7 @@ variable "name" {
 
 variable "sku" {
   description = "SKU of NGINXaaS deployment."
-  default     = "standard_Monthly"
+  default     = "standardv2_Monthly"
 }
 
 variable "tags" {