# cd /root/
# wget http://luajit.org/download/LuaJIT-2.1.0-beta3.tar.gz
# tar -xvf LuaJIT-2.1.0-beta3.tar.gz
# cd LuaJIT-2.1.0-beta3/
# make && make install
# ln -sf luajit-2.1.0-beta3 /usr/local/bin/luajit

cd /root/
git clone https://github.com/loveshell/ngx_lua_waf.git  git下载 | 去官网下载安装包后通过ftp工具上传后解压

未安装git就先安装 yum install git

# vim /usr/local/openresty/nginx/conf/nginx.conf
...
user nobody;     # 取消注释，或者指定用户，如 user root;
...
http{            # 在http块下添加如下内
...

lua_package_path "/root/waf/?.lua";
lua_shared_dict limit 10m;
init_by_lua_file  /root/waf/init.lua;
access_by_lua_file /root/waf/waf.lua;

...

cd /usr/local/openresty/nginx/logs
mkdir hack
chown -R nobody:nobody  /usr/local/openresty/nginx/logs/hack/

# cd /root/waf/     # ngx_lua_waf目录
# vim config.lua
...
RulePath = "/root/waf/wafconf/"    # 规则文件路径
attacklog = "on"                                             # 启用日志
logdir = "/usr/local/openresty/nginx/logs/hack/"             # 日志目录
...

# /usr/local/openresty/bin/openresty               # 如果没有启动服务，则启动
# /usr/local/openresty/bin/openresty -s reload     # 如果已经启动，则重载配置
# /usr/local/openresty/bin/openresty -t            # 测试配置是否正常

或者
./usr/local/openresty/nginx/sbin/nginx

ln -s /usr/local/openresty/lualib /usr/local/lib/lua
ln -s /usr/local/openresty/lualib/resty /root/waf/
ln -s /usr/local/openresty/lualib/resty /root/waf/resty

2020/04/16 17:10:15 [error] 23775#0: *1 failed to load external Lua file "/root/waf/waf.lua": cannot open /root/waf/waf.lua: Permission denied

#user nobody;
user root;