Please follow its manual to install it:
https://github.com/SpiderLabs/ModSecuri … _for_NGINX

$ sudo dnf install gcc-c++ flex bison curl-devel curl yajl yajl-devel GeoIP-devel doxygen 
$ cd /opt/ 
$ git clone https://github.com/SpiderLabs/ModSecurity 
$ cd ModSecurity 
$ git checkout libmodsecurity 
$ sh build.sh 
$ ./configure 
$ make 
$ make install 
$ cd /opt/ 
$ git clone https://github.com/SpiderLabs/ModSecurity-nginx 
$ cd /opt/Modsecurity-nginx 
$ git checkout experimental 
$ cd /opt/ 
*******************************************************************
$ wget http://nginx.org/download/nginx-1.9.2.tar.gz 
$ tar -xvzf nginx-1.9.2.tar.gz 
$ yum install zlib-devel 
*******************************************************************
$ ./configure --add-module=/opt/ModSecurity-nginx

I have left nginx as it is on my server (didn't use commands between  " **** ")

Where should I do the last ./configure ?
If looking for nginx, I found this:

/usr/sbin/nginx
/usr/share/nginx
/var/log/nginx
/var/lib/nginx
/etc/logrotate.d/nginx
/etc/nginx
/etc/init.d/nginx
/etc/ufw/applications.d/nginx
/etc/default/nginx
/root/iRedMail-0.9.2/samples/nginx
/root/iRedMail-0.9.2/conf/nginx

Thx

no ....
When you ned to add a new module for nginx, you should compile it from the working directory of nginx no ?
Where is this folder when nginx as been installed from binary ?

A post from nginx list:

append  the configure argument you already mentioned  ./configure --add-module=/opt/ModSecurity-nginx with the

--with-cc-opt='-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt=-Wl,-z,relro --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-ipv6 --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_auth_request_module --with-http_addition_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_spdy_module --with-http_sub_module --with-http_xslt_module --with-mail --with-mail_ssl_module --add-module=/tmp/buildd/nginx-1.6.2/debian/modules/nginx-auth-pam --add-module=/tmp/buildd/nginx-1.6.2/debian/modules/nginx-dav-ext-module --add-module=/tmp/buildd/nginx-1.6.2/debian/modules/nginx-echo --add-module=/tmp/buildd/nginx-1.6.2/debian/modules/nginx-upstream-fair --add-module=/tmp/buildd/nginx-1.6.2/debian/modules/ngx_http_substitutions_filter_module

##

One problem I see here is that you need to place the modules added there in their exact path like for example /tmp/buildd/nginx-1.6.2/debian/modules/nginx-upstream-fair .Otherwise you will have to modify those path accordingly. you need to install build deps for nginx too

Also you might be able to use 1.8.0 stable version

Follow - https://www.digitalocean.com/community/ … ian-wheezy . The difference is you are adding mod_sec instead of pagespeed .

I am not going to do it, I do not want to break everything .... Am I right ?