---

location /dvwa/ {
    modsecurity on;
    modsecurity_rules_file /etc/nginx/modsec/owasp-modsecurity-crs/crs-setup.conf;
    modsecurity_rules_file /etc/nginx/modsec/owasp-modsecurity-crs/rules/*.conf;
    # ВСТАВЬТЕ СТРОКУ НИЖЕ:
    modsecurity_rules_file /etc/nginx/modsec/custom_rules.conf;
}