## START: Set by rpmautospec
## (rpmautospec version 0.8.4)
## RPMAUTOSPEC: autorelease, autochangelog
%define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
    release_number = 18;
    base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
    print(release_number + base_release_number - 1);
}%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
## END: Set by rpmautospec

%global origname nginx-module-modsecurity
%global nginx_abi 1.26.3

Name:           nginx-mod-modsecurity
Version:        1.0.4
Release:        18.mikhaelos%{?dist}
Summary:        ModSecurity v3 nginx connector

License:        Apache-2.0
URL:            https://github.com/owasp-modsecurity/ModSecurity-nginx
Source0:        %{url}/archive/refs/tags/v%{version}.tar.gz#/%{origname}-%{version}.tar.gz
Source1:        https://raw.githubusercontent.com/owasp-modsecurity/ModSecurity/v3.0.17/modsecurity.conf-recommended
Source2:        https://raw.githubusercontent.com/owasp-modsecurity/ModSecurity/v3.0.17/unicode.mapping
Source3:        https://src.fedoraproject.org/rpms/nginx-mod-modsecurity/raw/rawhide/f/nginx.conf.modsecurity

BuildRequires:  gcc
BuildRequires:  libmodsecurity-devel
BuildRequires:  nginx-mod-devel
BuildRequires:  pcre2-devel
Requires:       nginx-filesystem
Requires:       nginx(abi) = %{nginx_abi}

%description
The ModSecurity-nginx connector is the connection point between nginx and
libmodsecurity (ModSecurity v3). Said another way, this project provides a
communication channel between nginx and libmodsecurity. This connector is
required to use LibModSecurity with nginx.

The ModSecurity-nginx connector takes the form of an nginx module. The module
simply serves as a layer of communication between nginx and ModSecurity

%prep
%autosetup -n ModSecurity-nginx-%{version}

# Change default path to avoid issues with SELinux
sed -i 's:/var/log/modsec_audit.log:/var/log/nginx/modsec_audit.log:' %{SOURCE1}

%build
%nginx_modconfigure
%nginx_modbuild

%install
pushd %{_vpath_builddir}
install -dm 0755 %{buildroot}%{nginx_moddir}
install -pm 0755 ngx_http_modsecurity_module.so %{buildroot}%{nginx_moddir}
install -dm 0755 %{buildroot}%{nginx_modconfdir}
echo 'load_module "%{nginx_moddir}/ngx_http_modsecurity_module.so";' \
    > %{buildroot}%{nginx_modconfdir}/mod-modsecurity.conf
popd
install -dm 0755 %{buildroot}%{_sysconfdir}/nginx/conf.d/
install -pm 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/nginx/modsecurity.conf
install -pm 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/nginx/unicode.mapping
install -pm 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/nginx/nginx.conf.modsecurity

%files
%license LICENSE
%doc README.md
%{nginx_moddir}/ngx_http_modsecurity_module.so
%{nginx_modconfdir}/mod-modsecurity.conf
%config(noreplace) %{_sysconfdir}/nginx/modsecurity.conf
%{_sysconfdir}/nginx/nginx.conf.modsecurity
%{_sysconfdir}/nginx/unicode.mapping