Home

Patterns Wiki

Automated OWASP Core Rule Set and bad-bot patterns, converted into native configurations for Nginx, Apache, Traefik and HAProxy, rebuilt every day.

This wiki is the operational companion to the documentation site. The docs site tells you how to install and integrate each backend; the wiki covers what happens when the integration fights back, and how the generation pipeline actually works.

Start here

The install and integration guides live on the docs site, not in this wiki, so there is only one copy to keep correct:

• Getting started: prerequisites, pre-built release or build from source
• Nginx · Apache · Traefik · HAProxy: per-platform integration
• Bad bots and API reference

In this wiki

• Troubleshooting Nginx: the include-placement rules, the "directive is not allowed here" family of errors, the 4096-character parameter limit, and which of these are still open bugs
• Troubleshooting HAProxy: why the ACL files need -f, and why HAProxy has no include inside a frontend
• How it works: the pipeline from upstream CRS to the published archives, the environment variables each converter reads, and what the daily workflow does
• FAQ: Caddy, search engines, refresh cadence, and which files you are actually supposed to include

Asking and reporting

Deployment questions go to Q&A, which covers the same ground as the FAQ in shorter form. The release model, and why pinning matters, is explained in this announcement.

Reporting a problem

Configuration errors are worth an issue with the exact nginx -t or haproxy -c output and the version you run. Several pages here exist because somebody did precisely that.