summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGeorg Pfuetzenreuter2023-02-05 20:03:18 +0100
committerGeorg Pfuetzenreuter2023-02-05 20:03:18 +0100
commit7dc481c996565a7db18978df22cd6b475c81b40f (patch)
treec704794bc9366d726b64c1ca8ce3fe89d38e34cd
parente3e4caaabe9795c56468e67c3b9105b2a5f53145 (diff)
parent12ce1345598c0586f399b0f99760079b069154ad (diff)
downloadsalt-7dc481c996565a7db18978df22cd6b475c81b40f.tar.gz
salt-7dc481c996565a7db18978df22cd6b475c81b40f.tar.bz2
salt-7dc481c996565a7db18978df22cd6b475c81b40f.zip
Merge pull request 'web-proxy: common nginx.conf' (#9) from nginxconf into production
Reviewed-on: https://git.com.de/LibertaCasa/salt/pulls/9
-rw-r--r--pillar/role/web-proxy.sls25
1 files changed, 25 insertions, 0 deletions
diff --git a/pillar/role/web-proxy.sls b/pillar/role/web-proxy.sls
index 398ecf0..2741fb1 100644
--- a/pillar/role/web-proxy.sls
+++ b/pillar/role/web-proxy.sls
@@ -1,6 +1,31 @@
{%- from slspath ~ '/../map.jinja' import listen_ips, listen_ips4, listen_ips6 -%}
nginx:
+ server:
+ config:
+ daemon: 'off'
+ user: []
+ events:
+ worker_connections: 1024
+ use: epoll
+ http:
+ include: snippets/modsecurity
+ tcp_nopush: []
+ tcp_nodelay: []
+ types_hash_max_size: []
+ access_log: []
+ error_log: []
+ gzip: []
+ gzip_disable: []
+ log_format main: |-
+ '$remote_addr - $remote_user [$time_local] $http_host "$request" '
+ '$status $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"'
+ log_format main-with_ip: |-
+ '$remote_addr - $remote_user [$time_local] $http_host "$request" '
+ '$status $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"'
+
snippets:
robots:
- location /robots.txt: