remove nginx -V check; add pillar example
This commit is contained in:
parent
26f606e634
commit
c2b896ea52
@ -13,7 +13,7 @@ events {
|
||||
}
|
||||
|
||||
http {
|
||||
{% if 'set_real_ips' in nginx and salt['cmd.retcode']('nginx -V 2>&1 | grep http_realip_module') == 0 -%}
|
||||
{% if 'set_real_ips' in nginx -%}
|
||||
{% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%}
|
||||
set_real_ip_from {{ ip }};
|
||||
{% endfor -%}
|
||||
|
@ -3,6 +3,10 @@ nginx:
|
||||
use_upstart: True
|
||||
with_luajit: False
|
||||
with_openresty: True
|
||||
set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled
|
||||
ips:
|
||||
- 10.10.10.0/24
|
||||
real_ip_header: X-Forwarded-For
|
||||
modules:
|
||||
headers-more:
|
||||
source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
|
||||
|
Loading…
Reference in New Issue
Block a user