<% if mod_security.to_s == 'true' then -%> SecRuleEngine On <% if mod_security_relevantonly.to_s == 'true' then -%> SecAuditEngine RelevantOnly <% else -%> SecAuditEngine On <% end -%> <% else -%> SecRuleEngine Off SecAuditEngine Off <% end -%> SecAuditLogType Concurrent SecAuditLogStorageDir <%= logdir %>/ SecAuditLog <%= logdir %>/mod_security_audit.log SecDebugLog <%= logdir %>/mod_security_debug.log <% unless mod_security_rules_to_disable.to_a.empty? -%> <% mod_security_rules_to_disable.to_a.each do |rule| -%> SecRuleRemoveById "<%= rule %>" <% end -%> <% end -%> <% unless mod_security_additional_options.to_s == 'absent' -%> <%= mod_security_additional_options %> <% end -%>