Update nginx datadog module and enable ASM

HadrienPatte · Aug 2, 2024 · 24f731b · 24f731b
1 parent 372f9a3
commit 24f731b
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 2 deletions.
diff --git a/roles/mediaserver/defaults/main.yml b/roles/mediaserver/defaults/main.yml
@@ -45,7 +45,7 @@ themepark:
   version: 1.16.2
 
 nginx_datadog:
-  version: 1.1.0
+  version: 1.2.1
 
 default:
   oci_registry: ghcr.io/hadrienpatte

diff --git a/roles/mediaserver/files/mod-http-datadog.conf b/roles/mediaserver/files/mod-http-datadog.conf
@@ -1 +1,3 @@
+thread_pool waf_thread_pool threads=2 max_queue=16;
+
 load_module modules/ngx_http_datadog_module.so;
diff --git a/roles/mediaserver/tasks/nginx.yml b/roles/mediaserver/tasks/nginx.yml
@@ -18,7 +18,7 @@
 - name: Download datadog nginx tracing module
   become: true
   ansible.builtin.unarchive:
-    src: "https://github.com/DataDog/nginx-datadog/releases/download/v{{ nginx_datadog.version }}/nginx_{{ ansible_facts.packages.nginx[0].version | split('-') | first }}-arm64-ngx_http_datadog_module.so.tgz"
+    src: "https://github.com/DataDog/nginx-datadog/releases/download/v{{ nginx_datadog.version }}/ngx_http_datadog_module-appsec-arm64-{{ ansible_facts.packages.nginx[0].version | split('-') | first }}.so.tgz"
     dest: /usr/lib/nginx/modules
     remote_src: "yes"
     owner: root

diff --git a/roles/mediaserver/templates/mediaserver.conf.j2 b/roles/mediaserver/templates/mediaserver.conf.j2
@@ -1,4 +1,6 @@
 datadog_environment {{ default.env }};
+datadog_appsec_enabled on;
+datadog_waf_thread_pool_name waf_thread_pool;
 
 server {
   listen 80;
Original file line number	Diff line number	Diff line change
		@@ -1 +1,3 @@
		thread_pool waf_thread_pool threads=2 max_queue=16;

		load_module modules/ngx_http_datadog_module.so;