From ba712a29b349067fef0d133f5b9e800142e2d8df Mon Sep 17 00:00:00 2001 From: Alan Dooley Date: Wed, 17 Dec 2025 16:43:04 +0000 Subject: [PATCH 1/2] feat: Improve F5 WAF multi-container Docker deployment This commit updates the instructions for an F5 WAF for NGINX multi-container Docker improvement to ensure that the mounts are consistent across containers and that an address is given a formal placeholder, indicating it must be replaced. This closes #1488, which also had all of the detail necessary for the fix thanks to @mrajagopal's level of detail in the issue. There is extra detail in the issue that could be used for further improvement of this use case in the future. --- content/waf/install/docker.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/waf/install/docker.md b/content/waf/install/docker.md index cc7970c3e..61bf1631a 100644 --- a/content/waf/install/docker.md +++ b/content/waf/install/docker.md @@ -316,7 +316,7 @@ load_module modules/ngx_http_app_protect_module.so; The Enforcer address must be added at the _http_ context: ```nginx -app_protect_enforcer_address 127.0.0.1:50000; +app_protect_enforcer_address ``` And finally, F5 WAF for NGINX can enabled on a _http_, _server_ or _location_ context: @@ -447,9 +447,9 @@ services: container_name: nginx image: nginx-app-protect-5 volumes: - - app_protect_bd_config:/opt/app_protect/bd_config - - app_protect_config:/opt/app_protect/config - - app_protect_etc_config:/etc/app_protect/conf + - /opt/app_protect/bd_config:/opt/app_protect/bd_config + - /opt/app_protect/config:/opt/app_protect/config + - /etc/app_protect/conf:/etc/app_protect/conf - /conf/nginx.conf:/etc/nginx/nginx.conf - /conf/default.conf:/etc/nginx/conf.d/default.conf - ./license.jwt:/etc/nginx/license.jwt # Only necessary when using NGINX Plus From d69fe98f5d0c5d4a62cde867230200fabd2c120f Mon Sep 17 00:00:00 2001 From: Alan Dooley Date: Thu, 18 Dec 2025 11:55:50 +0000 Subject: [PATCH 2/2] Update content/waf/install/docker.md --- content/waf/install/docker.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/waf/install/docker.md b/content/waf/install/docker.md index 61bf1631a..86dd52fdb 100644 --- a/content/waf/install/docker.md +++ b/content/waf/install/docker.md @@ -316,7 +316,7 @@ load_module modules/ngx_http_app_protect_module.so; The Enforcer address must be added at the _http_ context: ```nginx -app_protect_enforcer_address +app_protect_enforcer_address : ``` And finally, F5 WAF for NGINX can enabled on a _http_, _server_ or _location_ context: