Configuration reference
Top-level keys in cheesewaf.yaml and where this manual explains each block.
First start writes cheesewaf.yaml into the data directory.
The template is configs/cheesewaf.yaml in the product repo.
| Key | Manual |
|---|---|
server | TLS, Intro |
tls | TLS |
setup | Initialize, Storage |
deployment / cluster | Cluster |
console | Bot and CAPTCHA, Monitor |
sites | Sites |
protection | Protection |
block_page | Block pages |
storage | Storage |
logging | Monitor |
ai | ALAP |
update | Operations |
scheduler | Storage |
edge | Edge |
monitor | Monitor |
apisec | API security |
Timeouts
server.read_timeout, write_timeout, and idle_timeout apply to the HTTP servers.
sites[].waf.performance.proxy_timeout applies to the origin.
Reload
Saving a site or a protection policy in the console hot-reloads that slice.
A change to listen addresses still needs a process restart (cheesewaf restart or systemd).