nginx.conf

worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;

    keepalive_timeout  65;
    # Mod Security
    ModSecurityEnabled on;
    ModSecurityConfig modsecurity.conf;

    # Lua Module
    lua_package_path "/opt/nginx/conf/lua/?.lua;;";
    
    server {
        listen       80;
        server_name  localhost;
        root /opt/nginx/html;

        # Logging
        set $badurl "$http_host$request_uri";
        set $mobile_admin "0936016787";
        set $lua_cookie $http_cookie;

        # Lua Script
        lua_code_cache off;
        access_by_lua_file /opt/nginx/conf/lua/restrict_ip.lua;
        
        location / {
           default_type 'text/plain';
        }

        location /status {
            default_type 'text/plain';
            content_by_lua_block {
                ngx.say(ngx.var.remote_addr)
                ngx.say('attack is detected!')
                ngx.say(ngx.status)
            }
        }

        error_page 403 /status;
    }
}