From 688da047049b4eb599800406a892439f9ce15815 Mon Sep 17 00:00:00 2001
From: codepuncher <lee.hanbury@gmail.com>
Date: Tue, 5 Nov 2024 16:41:01 +0000
Subject: [PATCH] move WAF PHP script to `config/`

---
 tasks/main.yml                 | 5 ++++-
 templates/wordfence-waf.php.j2 | 9 +++++----
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/tasks/main.yml b/tasks/main.yml
index 9af1116..af65124 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -2,5 +2,8 @@
 - name: Template wordfence-waf.php
   ansible.builtin.template:
     src: "../templates/wordfence-waf.php.j2"
-    dest: "{{ deploy_helper.new_release_path }}/web/wp/wordfence-waf.php"
+    dest: "{{ deploy_helper.new_release_path }}/config/wordfence-waf.php"
     mode: "0755"
+  with_dict: "{{ wordpress_sites }}"
+  vars:
+    project_plugins_path: "{{ project.plugins_path | default('app/plugins') }}"
diff --git a/templates/wordfence-waf.php.j2 b/templates/wordfence-waf.php.j2
index 6894ee7..39fab56 100644
--- a/templates/wordfence-waf.php.j2
+++ b/templates/wordfence-waf.php.j2
@@ -1,7 +1,8 @@
 <?php
 // Before removing this file, please verify the PHP ini setting `auto_prepend_file` does not point to this.
-
-if (file_exists('{{ deploy_helper.new_release_path }}/web/app/plugins/wordfence/waf/bootstrap.php')) {
-	define('WFWAF_LOG_PATH', '{{ deploy_helper.new_release_path }}/../../wflogs/');
-	include_once '{{ deploy_helper.new_release_path }}/web/app/plugins/wordfence/waf/bootstrap.php';
+if (file_exists('{{ deploy_helper.new_release_path }}/{{ project_public_path }}/{{ project_plugins_path }}/wordfence/waf/bootstrap.php')) {
+	if (! defined('WFWAF_LOG_PATH')) {
+		define('WFWAF_LOG_PATH', '{{ deploy_helper.new_release_path }}/../../wflogs/');
+	}
+	include_once '{{ deploy_helper.new_release_path }}/{{ project_public_path }}/{{ project_plugins_path }}/wordfence/waf/bootstrap.php';
 }