remove nginx -V check; add pillar example
This commit is contained in:
parent
26f606e634
commit
c2b896ea52
@ -13,7 +13,7 @@ events {
|
|||||||
}
|
}
|
||||||
|
|
||||||
http {
|
http {
|
||||||
{% if 'set_real_ips' in nginx and salt['cmd.retcode']('nginx -V 2>&1 | grep http_realip_module') == 0 -%}
|
{% if 'set_real_ips' in nginx -%}
|
||||||
{% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%}
|
{% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%}
|
||||||
set_real_ip_from {{ ip }};
|
set_real_ip_from {{ ip }};
|
||||||
{% endfor -%}
|
{% endfor -%}
|
||||||
|
@ -3,6 +3,10 @@ nginx:
|
|||||||
use_upstart: True
|
use_upstart: True
|
||||||
with_luajit: False
|
with_luajit: False
|
||||||
with_openresty: True
|
with_openresty: True
|
||||||
|
set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled
|
||||||
|
ips:
|
||||||
|
- 10.10.10.0/24
|
||||||
|
real_ip_header: X-Forwarded-For
|
||||||
modules:
|
modules:
|
||||||
headers-more:
|
headers-more:
|
||||||
source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
|
source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
|
||||||
|
Loading…
Reference in New Issue
Block a user