summaryrefslogtreecommitdiffstats
path: root/pillar
diff options
context:
space:
mode:
authorGeorg Pfuetzenreuter2023-02-05 19:59:04 +0100
committerGeorg Pfuetzenreuter2023-02-05 19:59:04 +0100
commit12ce1345598c0586f399b0f99760079b069154ad (patch)
treec704794bc9366d726b64c1ca8ce3fe89d38e34cd /pillar
parente3e4caaabe9795c56468e67c3b9105b2a5f53145 (diff)
downloadsalt-12ce1345598c0586f399b0f99760079b069154ad.tar.gz
salt-12ce1345598c0586f399b0f99760079b069154ad.tar.bz2
salt-12ce1345598c0586f399b0f99760079b069154ad.zip
web-proxy: common nginx.conf
Import default nginx.conf contents from our custom packaged file into Salt. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Diffstat (limited to 'pillar')
-rw-r--r--pillar/role/web-proxy.sls25
1 files changed, 25 insertions, 0 deletions
diff --git a/pillar/role/web-proxy.sls b/pillar/role/web-proxy.sls
index 398ecf0..2741fb1 100644
--- a/pillar/role/web-proxy.sls
+++ b/pillar/role/web-proxy.sls
@@ -1,6 +1,31 @@
{%- from slspath ~ '/../map.jinja' import listen_ips, listen_ips4, listen_ips6 -%}
nginx:
+ server:
+ config:
+ daemon: 'off'
+ user: []
+ events:
+ worker_connections: 1024
+ use: epoll
+ http:
+ include: snippets/modsecurity
+ tcp_nopush: []
+ tcp_nodelay: []
+ types_hash_max_size: []
+ access_log: []
+ error_log: []
+ gzip: []
+ gzip_disable: []
+ log_format main: |-
+ '$remote_addr - $remote_user [$time_local] $http_host "$request" '
+ '$status $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"'
+ log_format main-with_ip: |-
+ '$remote_addr - $remote_user [$time_local] $http_host "$request" '
+ '$status $body_bytes_sent "$http_referer" '
+ '"$http_user_agent" "$http_x_forwarded_for"'
+
snippets:
robots:
- location /robots.txt: