Merge pull request '[NEW] Adds configuration to Nginx for Real IP detection' (#2) from verify_nginx_config into main
Reviewed-on: #2
This commit is contained in:
commit
b38321e5b2
58
roles/nginxproxy/files/nginx.conf
Normal file
58
roles/nginxproxy/files/nginx.conf
Normal file
@ -0,0 +1,58 @@
|
|||||||
|
user www-data;
|
||||||
|
worker_processes auto;
|
||||||
|
pid /run/nginx.pid;
|
||||||
|
include /etc/nginx/modules-enabled/*.conf;
|
||||||
|
|
||||||
|
events {
|
||||||
|
worker_connections 1024;
|
||||||
|
multi_accept on;
|
||||||
|
}
|
||||||
|
|
||||||
|
http {
|
||||||
|
# Basic Settings
|
||||||
|
|
||||||
|
sendfile on;
|
||||||
|
tcp_nopush on;
|
||||||
|
tcp_nodelay on;
|
||||||
|
keepalive_timeout 95;
|
||||||
|
types_hash_max_size 2048;
|
||||||
|
# server_tokens off;
|
||||||
|
|
||||||
|
# server_names_hash_bucket_size 64;
|
||||||
|
# server_name_in_redirect off;
|
||||||
|
|
||||||
|
include /etc/nginx/mime.types;
|
||||||
|
default_type application/octet-stream;
|
||||||
|
|
||||||
|
# Pass real IP to proxied domains
|
||||||
|
|
||||||
|
real_ip_header proxy_protocol;
|
||||||
|
set_real_ip_from 127.0.0.1;
|
||||||
|
|
||||||
|
# SSL Settings
|
||||||
|
|
||||||
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
|
||||||
|
# Logging Settings
|
||||||
|
|
||||||
|
access_log /var/log/nginx/access.log;
|
||||||
|
error_log /var/log/nginx/error.log;
|
||||||
|
|
||||||
|
# Gzip Settings
|
||||||
|
|
||||||
|
gzip on;
|
||||||
|
|
||||||
|
# gzip_vary on;
|
||||||
|
# gzip_proxied any;
|
||||||
|
# gzip_comp_level 6;
|
||||||
|
# gzip_buffers 16 8k;
|
||||||
|
# gzip_http_version 1.1;
|
||||||
|
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
|
||||||
|
|
||||||
|
# Virtual Host Configs
|
||||||
|
|
||||||
|
include /etc/nginx/conf.d/*.conf;
|
||||||
|
include /etc/nginx/sites-enabled/*;
|
||||||
|
}
|
||||||
|
|
||||||
@ -4,6 +4,11 @@
|
|||||||
- set_fact:
|
- set_fact:
|
||||||
container: '{{ nombre | urlencode | lower | regex_replace("_", "-") }}'
|
container: '{{ nombre | urlencode | lower | regex_replace("_", "-") }}'
|
||||||
|
|
||||||
|
- name: Verify Nginx config
|
||||||
|
copy:
|
||||||
|
src: nginx.conf
|
||||||
|
dest: '/etc/nginx/nginx.conf'
|
||||||
|
|
||||||
- name: Create basic Nginx config for new container
|
- name: Create basic Nginx config for new container
|
||||||
template:
|
template:
|
||||||
src: newsite.conf.j2
|
src: newsite.conf.j2
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user