Configuring WAF for Shinobi CCTV

Hi guys,

I'd like to use the WAF on the UTM for my CCTV software shinobi. The developer of the shinobi docker container wrote in his documentation, that one should add following lines to the letsencrypt subdomain.conf on the nginx reverse proxy:

# make sure that your dns has a cname set for Shinobi

server {
listen 443 ssl;
listen [::]:443 ssl;

server_name shinobi.*;

include /config/nginx/ssl.conf;

client_max_body_size 0;

location / {
include /config/nginx/proxy.conf;
proxy_pass http://IP-OF-CONTAINER:8080;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;

}

}

These lines are for nginx rp, but it seems, that there is a apache rp on the UTM. For the last three lines, I found these apache equivalents on the internet:

RewriteEngine On
RewriteCond %{HTTP:Connection} Upgrade [NC]
RewriteCond %{HTTP:Upgrade} websocket [NC]
RewriteRule /(.*) ws://127.0.0.1:3000/$1 [P,L]
ProxyPreserveHost On

When I add these lines to /var/storage/chroot-reverseproxy/usr/apache/conf/reverseproxy.conf on the UTM in the section for the CCTV subdomain, shinobi still doesn't work as expected. The monitors (cameras) are still not displayed). When I restart the virtual webserver over the gui, the added lines are removed from reverseproxy.conf. In the WAF logs, I cannot find any entries, that would help me.

Can you help me with that?

Thank you for your help in advance!

Maginos