modsecurity on; modsecurity_rules_file /etc/nginx/modsec/main.conf;