Configuration reference

Top-level keys in cheesewaf.yaml and where this manual explains each block.

First start writes cheesewaf.yaml into the data directory. The template is configs/cheesewaf.yaml in the product repo.

KeyManual
serverTLS, Intro
tlsTLS
setupInitialize, Storage
deployment / clusterCluster
consoleBot and CAPTCHA, Monitor
sitesSites
protectionProtection
block_pageBlock pages
storageStorage
loggingMonitor
aiALAP
updateOperations
schedulerStorage
edgeEdge
monitorMonitor
apisecAPI security

Timeouts

server.read_timeout, write_timeout, and idle_timeout apply to the HTTP servers. sites[].waf.performance.proxy_timeout applies to the origin.

Reload

Saving a site or a protection policy in the console hot-reloads that slice. A change to listen addresses still needs a process restart (cheesewaf restart or systemd).