|
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305 |
-
-
-
- nginx:
- install_from_source: True
- use_upstart: True
- use_sysvinit: False
- user_auth_enabled: True
- with_luajit: False
- with_openresty: True
- repo_version: development
- set_real_ips:
- from_ips:
- - 10.10.10.0/24
- real_ip_header: X-Forwarded-For
- modules:
- headers-more:
- source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
- source_hash: sha1=dbf914cbf3f7b6cb7e033fa7b7c49e2f8879113b
-
-
-
-
-
-
-
- nginx:
- ng:
-
-
-
-
-
- install_from_repo: false
-
-
-
- install_from_phusionpassenger: false
-
-
- install_from_ppa: false
-
- ppa_version: 'stable'
-
-
- source_version: '1.10.0'
- source_hash: ''
-
-
-
- lookup:
- package: nginx-custom (can be a list)
- service: nginx
- webuser: www-data
- conf_file: /etc/nginx/nginx.conf
- server_available: /etc/nginx/sites-available
- server_enabled: /etc/nginx/sites-enabled
- server_use_symlink: True
-
- passenger_package: libnginx-mod-http-passenger
- passenger_config_file: /etc/nginx/conf.d/mod-http-passenger.conf
-
-
- rh_os_releasever: '6'
-
- gpg_check: True
- pid_file: /var/run/nginx.pid
-
-
-
- from_source: False
-
- source:
- opts: {}
-
- package:
- opts: {}
-
- service:
- enable: True
- opts: {}
-
-
-
-
-
- snippets:
- letsencrypt:
- - location ^~ /.well-known/acme-challenge/:
- - proxy_pass: http://localhost:9999
- cloudflare_proxy:
- - set_real_ip_from: 103.21.244.0/22
- - set_real_ip_from: 103.22.200.0/22
- - set_real_ip_from: 104.16.0.0/12
- - set_real_ip_from: 108.162.192.0/18
- blacklist:
- - map $http_user_agent $bad_bot:
- - default: 0
- - '~*^Lynx': 0
- - '~*malicious': 1
- - '~*bot': 1
- - '~*crawler': 1
- - '~*bandit': 1
- - libwww-perl: 1
- - '~(?i)(httrack|htmlparser|libwww)': 1
- upstream_netdata_tcp:
- - upstream netdata:
- - server: 127.0.0.1:19999
- - keepalive: 64
-
-
- server:
- opts: {}
-
-
-
-
-
-
- config:
- include 'snippets/letsencrypt.conf'
- source_path: salt://path_to_nginx_conf_file/nginx.conf
-
-
- worker_processes: 4
- load_module: modules/ngx_http_lua_module.so
-
- events:
- worker_connections: 768
- http:
- sendfile: 'on'
- include:
-
- - /etc/nginx/mime.types
-
-
- log_format: |-
- main '...';
- access_log /var/log/nginx/access_log main
- access_log: []
-
-
-
- stream:
- upstream lb-1000:
- - server:
- - hostname1.example.com:1000
- - hostname2.example.com:1000
- upstream stream_backend:
- least_conn: ''
- 'server backend1.example.com:12345 weight=5':
- 'server backend2.example.com:12345 max_fails=2 fail_timeout=30s':
- 'server backend3.example.com:12345 max_conns=3':
- upstream dns_servers:
- least_conn:
- 'server 192.168.136.130:53':
- 'server 192.168.136.131:53':
- 'server 192.168.136.132:53':
- server:
- listen: 1000
- proxy_pass: lb-1000
- 'server ':
- listen: '53 udp'
- proxy_pass: dns_servers
- 'server ':
- listen: 12346
- proxy_pass: backend4.example.com:12346
-
-
- servers:
- disabled_postfix: .disabled
- symlink_opts: {}
- rename_opts: {}
- managed_opts: {}
- dir_opts: {}
-
-
-
-
-
- managed:
-
- mysite:
-
- enabled: True
-
-
-
-
-
-
-
-
- disabled_name: mysite.aint_on
- overwrite: True
-
-
-
-
- config:
- - server:
- - server_name: localhost
- - listen:
- - '80 default_server'
- - listen:
- - '443 ssl'
- - index: 'index.html index.htm'
- - location ~ .htm:
- - try_files: '$uri $uri/ =404'
- - test: something else
- - include 'snippets/letsencrypt.conf'
-
-
-
- - server:
- - server_name: localhost
- - listen:
- - '80 default_server'
- - '443 ssl'
- - index: 'index.html index.htm'
- - location ~ .htm:
- - try_files: '$uri $uri/ =404'
- - test: something else
- - include 'snippets/letsencrypt.conf'
-
-
-
-
-
-
-
-
-
-
-
-
-
- mysite2:
- enabled: True
- available_dir: /etc/nginx/sites-available
- enabled_dir: /etc/nginx/sites-enabled
- config:
- source_path: salt://path-to-site-file/mysite2
-
-
-
-
-
-
-
-
-
-
- http_options.conf:
- enabled: True
- available_dir: /usr/local/etc/nginx
- enabled_dir: /usr/local/etc/nginx
- config:
- - sendfile: 'on'
- - tcp_nopush: 'on'
- - tcp_nodelay: 'on'
- - send_iowait: 12000
-
- certificates_path: '/etc/nginx/ssl'
-
-
-
- certificates:
- 'www.example.com':
-
-
-
-
-
- public_cert: |
- -----BEGIN CERTIFICATE-----
- (Your Primary SSL certificate: www.example.com.crt)
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
- (Your Intermediate certificate: ExampleCA.crt)
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
- (Your Root certificate: TrustedRoot.crt)
- -----END CERTIFICATE-----
- private_key: |
- -----BEGIN RSA PRIVATE KEY-----
- (Your Private Key: www.example.com.key)
- -----END RSA PRIVATE KEY-----
-
- dh_param:
- 'mydhparam1.pem': |
- -----BEGIN DH PARAMETERS-----
- (Your custom DH prime)
- -----END DH PARAMETERS-----
- # or to generate one on-the-fly
- 'mydhparam2.pem':
- keysize: 2048
-
-
-
-
- passenger:
- passenger_root: /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini
- passenger_ruby: /usr/bin/ruby
- passenger_instance_registry_dir: /var/run/passenger-instreg
|