Does anyone know of a set of WAF rules - free or commercial - that I can use on my server, rather than outsourcing to Sucuri or CloudFlare? I have used modsecu

Does anyone know of a set of WAF rules - free or commercial - that I can use on my server, rather than outsourcing to Sucuri or CloudFlare? I have used modsecurity before and found writing rules difficult, so happy to pay.