@@ -13,7 +13,7 @@ events { | |||
} | |||
http { | |||
{% if 'set_real_ips' in nginx and salt['cmd.retcode']('nginx -V 2>&1 | grep http_realip_module') == 0 -%} | |||
{% if 'set_real_ips' in nginx -%} | |||
{% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%} | |||
set_real_ip_from {{ ip }}; | |||
{% endfor -%} |
@@ -3,6 +3,10 @@ nginx: | |||
use_upstart: True | |||
with_luajit: False | |||
with_openresty: True | |||
set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled | |||
ips: | |||
- 10.10.10.0/24 | |||
real_ip_header: X-Forwarded-For | |||
modules: | |||
headers-more: | |||
source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21 |