diff --git a/nginx/templates/config.jinja b/nginx/templates/config.jinja index 0b21441..a8cc4f1 100644 --- a/nginx/templates/config.jinja +++ b/nginx/templates/config.jinja @@ -13,7 +13,7 @@ events { } http { - {% if 'set_real_ips' in nginx and salt['cmd.retcode']('nginx -V 2>&1 | grep http_realip_module') == 0 -%} + {% if 'set_real_ips' in nginx -%} {% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%} set_real_ip_from {{ ip }}; {% endfor -%} diff --git a/pillar.example b/pillar.example index 05019aa..6477648 100644 --- a/pillar.example +++ b/pillar.example @@ -3,6 +3,10 @@ nginx: use_upstart: True with_luajit: False with_openresty: True + set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled + ips: + - 10.10.10.0/24 + real_ip_header: X-Forwarded-For modules: headers-more: source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21