infrastructure/ansible-ops-management
7
1
Fork 0
Code Issues Pull Requests Projects Releases Activity

use realip module in nginx to log true client IP #1

Merged
label merged 1 commits from nginx/realip into main 2023-10-11 01:46:59 +00:00
Conversation 0 Commits 1 Files Changed 1 +12
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 0d9d932491 - Show all commits

12
templates/etc/nginx/conf.d/repopool-http-production.conf.j2
View File

@ -4,6 +4,12 @@
server_name _; server_name _;
root /mnt/repos-production/mirror; root /mnt/repos-production/mirror;
# Fastly sets the client IP in this header (and it cannot be overriden by user)
real_ip_header Fastly-Client-IP;
real_ip_recursive on;
set_real_ip_from 10.32.0.0/16;
set_real_ip_from ::/0;
location / { location / {
autoindex on; autoindex on;
} }
@ -41,6 +47,12 @@
ssl_certificate_key /etc/pki/tls/private/dl.rockylinux.org.key; ssl_certificate_key /etc/pki/tls/private/dl.rockylinux.org.key;
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
# Fastly sets the client IP in this header (and it cannot be overriden by user)
real_ip_header Fastly-Client-IP;
real_ip_recursive on;
set_real_ip_from 10.32.0.0/16;
set_real_ip_from ::/0;
location / { location / {
autoindex on; autoindex on;
} }