The libmodsecurity code has been re-written and now doesn't need to be used as an Apache module. It can be used with Nginx now too!
I have written a script to build the module and we should include that in all nginx based apps in v17.0.
See the script: turnkeylinux/common@69d381a