modsecurity_rules_file modsecurity/rules.conf;

## NOT enabling ModSecurity by default!
# modsecurity on;