pillar/role/web-proxy.sls

@@ -1,6 +1,31 @@
 {%- from slspath ~ '/../map.jinja' import listen_ips, listen_ips4, listen_ips6 -%}
 
 nginx:
+  server:
+    config:
+      daemon: 'off'
+      user: []
+      events:
+        worker_connections: 1024
+        use: epoll
+      http:
+        include: snippets/modsecurity
+        tcp_nopush: []
+        tcp_nodelay: []
+        types_hash_max_size: []
+        access_log: []
+        error_log: []
+        gzip: []
+        gzip_disable: []
+        log_format main: |-
+            '$remote_addr - $remote_user [$time_local] $http_host "$request" '
+                          '$status $body_bytes_sent "$http_referer" '
+                          '"$http_user_agent" "$http_x_forwarded_for"'
+        log_format main-with_ip: |-
+            '$remote_addr - $remote_user [$time_local] $http_host "$request" '
+                          '$status $body_bytes_sent "$http_referer" '
+                          '"$http_user_agent" "$http_x_forwarded_for"'
+
   snippets:
     robots:
       - location /robots.txt: