diff --git a/samples/httpaste.it/httpd/Dockerfile b/samples/httpaste.it/httpd/Dockerfile
index afcc50e..0dc9490 100644
--- a/samples/httpaste.it/httpd/Dockerfile
+++ b/samples/httpaste.it/httpd/Dockerfile
@@ -1,3 +1,14 @@
FROM httpd:2.4
-RUN apt-get update -y && apt-get install -y libapache2-mod-proxy-uwsgi
\ No newline at end of file
+RUN apt-get update -y && apt-get install -y \
+ libapache2-mod-proxy-uwsgi \
+ libapache2-mod-evasive \
+ libapache2-mod-security2
+
+RUN mkdir -p /usr/local/apache2/crs-tecmint
+
+ADD https://github.com/SpiderLabs/owasp-modsecurity-crs/archive/refs/tags/v3.2.0.tar.gz /usr/local/apache2/crs/master
+
+RUN cd /usr/local/apache2/crs && \
+ tar -xzf master && \
+ cp owasp-modsecurity-crs-3.2.0/crs-setup.conf.example owasp-modsecurity-crs-3.2.0/crs-setup.conf
\ No newline at end of file
diff --git a/samples/httpaste.it/httpd/usr/local/apache2/conf/httpd.conf b/samples/httpaste.it/httpd/usr/local/apache2/conf/httpd.conf
index 4c5ead0..07c9156 100644
--- a/samples/httpaste.it/httpd/usr/local/apache2/conf/httpd.conf
+++ b/samples/httpaste.it/httpd/usr/local/apache2/conf/httpd.conf
@@ -16,6 +16,9 @@ LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so
LoadModule unixd_module modules/mod_unixd.so
LoadModule access_compat_module modules/mod_access_compat.so
+LoadModule security2_module /usr/lib/apache2/modules/mod_security2.so
+LoadModule evasive20_module /usr/lib/apache2/modules/mod_evasive20.so
+
User www-data
@@ -23,7 +26,23 @@ LoadModule access_compat_module modules/mod_access_compat.so
ServerAdmin you@example.com
+ServerSignature Off
+ServerTokens Prod
+
+ Include crs/owasp-modsecurity-crs-3.2.0/crs-setup.conf
+ Include crs/owasp-modsecurity-crs-3.2.0/rules/*.conf
+
+
+
+ DOSHashTableSize 3097
+ DOSPageCount 3
+ DOSSiteCount 10
+ DOSPageInterval 1
+ DOSSiteInterval 1
+ DOSBlockingPeriod 10
+ DOSCloseSocket On
+
ErrorLog /proc/self/fd/2
@@ -58,6 +77,7 @@ ServerName 127.0.0.1
#ProxyPreserveHost On
ServerName httpaste.it
+ ServerAlias localhost
SetEnv proxy-sendchunks
ProxyPass "/" "unix:/shared/uwsgi.sock|uwsgi://localhost/"