load crs config failed

[dirac921]

Error: loading initial config: loading new config: loading http app module: provision http: server srv0: setting up route handlers: route 0: loading handler modules: position 0: loading module 'waf': provision http.handlers.waf: invalid WAF config from string: failed to readfile: open @owasp_crs\REQUEST-901-INITIALIZATION.conf: The system cannot find the path specified.

{
	debug
	order coraza_waf first
}
(waf) {
	coraza_waf {
		load_owasp_crs
		directives `
			Include @coraza.conf-recommended
			Include @crs-setup.conf.example
			Include @owasp_crs/*.conf
			SecRuleEngine On
		`
	}
}
:8809 {
	import waf
	handle_path /videoApi/* {
		reverse_proxy https://10.89.15.11:943 {
			transport http {
				tls_insecure_skip_verify
			}
		}
	}
	log {
		format json {
			time_local
			time_format wall_milli
		}
		output file ./log/1.log
	}
}

[oleksandrl5]

Any updates?

[IlmLV]

I suppose you are trying to run Caddy with this configuration on Windows, I have discovered that there is issue with using Include @owasp_crs/*.conf, looks like bundled configuration files with forward slash not working properly on Windows.
As quick fix currently I am using local files loaded with Include rules/*.conf

[jcchavezs]

I believe after #176 it should be fixed.

[IlmLV]

still having same issue using bundled configuration rules (Include @owasp_crs/*.conf) on Windows, when download them and use as locally existing config files, waf works just fine
Windows 11 24h2
coraza-caddy: v2.0.0

{"message":"loading new config: loading http app module: provision http: server srv0: setting up route handlers: route 0: loading handler modules: position 0: loading module 'waf': provision http.handlers.waf: invalid WAF config from string: failed to readfile: open @owasp_crs\\REQUEST-901-INITIALIZATION.conf: The system cannot find the path specified."}

Full Caddyfile:

{
    order coraza_waf first
}

(waf) {
    coraza_waf {
        load_owasp_crs

        directives `
        Include @coraza.conf-recommended
        Include @crs-setup.conf.example
        
        # This fails
        Include @owasp_crs/*.conf
        
        # This works fine
        #Include rules/*.conf
        
        SecRuleEngine On
        `
    }
}

:8080 {
    import waf
    respond "Hello, world!" 200
}