From 2310153e18c8c24124b320a34a01dbd3aeb3a5da Mon Sep 17 00:00:00 2001
From: "Hunter T." <strangeranger@hthompson.dev>
Date: Fri, 2 Oct 2026 13:56:28 -0700
Subject: [PATCH 1/4] fix(nginx-waf): add bison and flex to required packages

---
 hardening/Nginx WAF/nginx-waf.bash | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hardening/Nginx WAF/nginx-waf.bash b/hardening/Nginx WAF/nginx-waf.bash
index acb538b..2192902 100755
--- a/hardening/Nginx WAF/nginx-waf.bash	
+++ b/hardening/Nginx WAF/nginx-waf.bash	
@@ -37,6 +37,8 @@ readonly C_REQUIRED_PKGS=(
     autoconf
     automake
     build-essential
+    bison
+    flex
     libcurl4-openssl-dev
     libgeoip-dev
     libpcre2-dev

From 7fefe50cb8ce6b5b91ab1fa85354992339b22013 Mon Sep 17 00:00:00 2001
From: "Hunter T." <strangeranger@hthompson.dev>
Date: Fri, 2 Oct 2026 14:07:00 -0700
Subject: [PATCH 2/4] chore(nginx-waf): add TODOs for improved configuration
 handling

---
 hardening/Nginx WAF/nginx-waf.bash | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/hardening/Nginx WAF/nginx-waf.bash b/hardening/Nginx WAF/nginx-waf.bash
index 2192902..3598bf9 100755
--- a/hardening/Nginx WAF/nginx-waf.bash	
+++ b/hardening/Nginx WAF/nginx-waf.bash	
@@ -194,6 +194,9 @@ fi
 ###
 ### [ Clone and build ModSecurity ]
 ###
+### TODO: Implement a check that offers to update ModSecurity, rather than get the newest
+###     version automatically.
+###
 
 if [[ ! -d "ModSecurity/.git" ]]; then
     echo "${C_INFO}Cloning ModSecurity repository..."
@@ -277,8 +280,9 @@ echo "${C_INFO}Configuring ModSecurity rules..."
 pushd ModSecurity >/dev/null
 sudo mkdir -p "$C_MODSEC_PATH"
 sudo cp unicode.mapping "$C_MODSEC_PATH/"
+## TODO: Add a check to prevent overwriting an existing modsecurity.conf if it has been
+##  modified.
 sudo cp modsecurity.conf-recommended "$C_MODSEC_CONF_PATH"
-
 echo "${C_INFO}Enabling ModSecurity in On mode..."
 sudo sed -i 's/SecRuleEngine DetectionOnly/SecRuleEngine On/' "$C_MODSEC_CONF_PATH"
 popd >/dev/null
@@ -299,6 +303,8 @@ if [[ $coreruleset_clone_exists == true ]]; then
     confirm_git_pull "" "true"
 fi
 
+## TODO: Add a check to prevent overwriting an existing crs-setup.conf if it has been
+##  modified.
 echo "${C_INFO}Configuring OWASP Core Rule Set..."
 sudo cp crs-setup.conf.example crs-setup.conf
 popd >/dev/null

From 76e6219b3c5b536fe8dca50b66efe1e05e4ae4ef Mon Sep 17 00:00:00 2001
From: "Hunter T." <strangeranger@hthompson.dev>
Date: Fri, 2 Oct 2026 19:32:40 -0700
Subject: [PATCH 3/4] docs: update CHANGELOG

---
 hardening/Nginx WAF/CHANGELOG.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hardening/Nginx WAF/CHANGELOG.md b/hardening/Nginx WAF/CHANGELOG.md
index ea78170..3b1b8dd 100644
--- a/hardening/Nginx WAF/CHANGELOG.md	
+++ b/hardening/Nginx WAF/CHANGELOG.md	
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## v1.0.1 - 2026-09-02
+
+### Fixed
+
+- Add missing required packages `bison` and `flex` for ModSecurity source build.
+
 ## v1.0.0 - 2026-07-03
 
 ### Added

From 10993e09cda60f2a59a27e75b575503074907ec4 Mon Sep 17 00:00:00 2001
From: "Hunter T." <strangeranger@hthompson.dev>
Date: Fri, 2 Oct 2026 19:33:15 -0700
Subject: [PATCH 4/4] chore: update version number

---
 hardening/Nginx WAF/nginx-waf.bash | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hardening/Nginx WAF/nginx-waf.bash b/hardening/Nginx WAF/nginx-waf.bash
index 3598bf9..d0eef25 100755
--- a/hardening/Nginx WAF/nginx-waf.bash	
+++ b/hardening/Nginx WAF/nginx-waf.bash	
@@ -6,7 +6,7 @@
 # Nginx to load the module, and sets up the OWASP Core Rule Set for basic protection against
 # common web vulnerabilities.
 #
-# Version: v1.0.0
+# Version: v1.0.1
 # License: MIT License
 #          Copyright (c) 2026 Hunter T. (StrangeRanger)
 #