Nginx + OWASP ModSecurity and Core Rule Set on top of Wolffi OS

[rafitox]

Hi guys! I was thinking about contributing to Wolffi OS and the Owasp CRS project at the same time. They have been developing the modsecurity on top of alpine base images of apache/nginx. It would be very cool to expand and build the modsecurity modules on Wolffi OS as well. It would be possible to combine the benefits of distroless containers with fast, secure webservers applying the opensource rules of OWAASP CRS for Web-application firewalls. It would be necessary to build the apk's from alpine to wolffi Os using melange, and that could be a problem, but i believe most packages are already contained in the chainguard nginx base image. What do you guys think? Best regards

Edit: Here is the link of the project i'm referring to https://github.com/coreruleset/modsecurity-crs-docker