Browse Source
feature(trust): improved remote ip internal proxy support (#300)
* feat(trusted_proxy): Add support for RemoteIPInternalProxy * fix(syntax): add semicolontags/v1.1.2
Marius van Witzenburg
4 years ago
4 changed files with 12 additions and 0 deletions
+ 3
- 0
apache/files/Debian/conf-available/remoteip.conf.jinja
View File
| {%- for trusted_proxy in salt['pillar.get']('apache:mod_remoteip:RemoteIPTrustedProxy', []) %} | {%- for trusted_proxy in salt['pillar.get']('apache:mod_remoteip:RemoteIPTrustedProxy', []) %} | ||||
| RemoteIPTrustedProxy {{ trusted_proxy }} | RemoteIPTrustedProxy {{ trusted_proxy }} | ||||
| {%- endfor %} | {%- endfor %} | ||||
| {%- for trusted_proxy in salt['pillar.get']('apache:mod_remoteip:RemoteIPInternalProxy', []) %} | |||||
| RemoteIPInternalProxy {{ trusted_proxy }} | |||||
| {%- endfor %} |
+ 3
- 0
apache/files/RedHat/conf.modules.d/remoteip.conf.jinja
View File
| {%- for trusted_proxy in salt['pillar.get']('apache:mod_remoteip:RemoteIPTrustedProxy', []) %} | {%- for trusted_proxy in salt['pillar.get']('apache:mod_remoteip:RemoteIPTrustedProxy', []) %} | ||||
| RemoteIPTrustedProxy {{ trusted_proxy }} | RemoteIPTrustedProxy {{ trusted_proxy }} | ||||
| {%- endfor %} | {%- endfor %} | ||||
| {%- for trusted_proxy in salt['pillar.get']('apache:mod_remoteip:RemoteIPInternalProxy', []) %} | |||||
| RemoteIPInternalProxy {{ trusted_proxy }} | |||||
| {%- endfor %} |
+ 3
- 0
pillar.example
View File
| RemoteIPTrustedProxy: | RemoteIPTrustedProxy: | ||||
| - 10.0.8.0/24 | - 10.0.8.0/24 | ||||
| - 127.0.0.1 | - 127.0.0.1 | ||||
| RemoteIPInternalProxy: | |||||
| - 10.10.8.0/24 | |||||
| - 127.0.0.1 | |||||
| # ``apache.mod_security`` formula additional configuration: | # ``apache.mod_security`` formula additional configuration: | ||||
| mod_security: | mod_security: |
+ 3
- 0
test/salt/pillar/modules.sls
View File
| RemoteIPTrustedProxy: | RemoteIPTrustedProxy: | ||||
| - 10.0.8.0/24 | - 10.0.8.0/24 | ||||
| - 127.0.0.1 | - 127.0.0.1 | ||||
| RemoteIPInternalProxy: | |||||
| - 10.10.8.0/24 | |||||
| - 127.0.0.1 | |||||
| # ``apache.mod_security`` formula additional configuration: | # ``apache.mod_security`` formula additional configuration: | ||||
| mod_security: | mod_security: |
Loading…