How to set up a self-hosted WAF for Webapps in 2 minutes

Description and use

Install Aegis, a self‑hosted WAF, in under two minutes using a script or Docker, and protect web apps from SQL injection and XSS.

Problem

Deploying a Web Application Firewall (WAF) quickly and without complex Nginx configurations

Outcome

Aegis blocks a simulated SQL Injection with HTTP 403 and provides a dashboard for route management and threat monitoring

Workflow

• Clone the Aegis repository and run the installer script
• Verify the aegis systemd service is active
• Alternatively run the Docker container with ports 8080 and 8081 exposed
• Test WAF by sending a simulated SQL Injection payload to the proxy
• Open the web dashboard at http://localhost:8081 to manage routes and view telemetry

Evidence

Clone the repository and run the automated installer: git clone https://github.com/divinelabio/aegis.git cd aegis sudo bash install.sh

Source

docker run -d --name aegis_server \
--restart unless-stopped \
-p 8080:8080 -p 8081:8081 \
-v aegis_data:/var/lib/aegis/data \
-e AEGIS_ADMIN_PASSWORD="ChooseStrongAdminPassword123!" \
ghcr.io/divinelabio/aegis:latest

Source

curl -i "http://localhost:8080/?id=1%27%20OR%201=1--"

Source

HTTP/1.1 403 Forbidden X-WAF-Rule-ID: 942100 Access denied: This request was rejected by the application security layer.

Source