} | } | ||||
http { | http { | ||||
{% if 'set_real_ips' in nginx and salt['cmd.retcode']('nginx -V 2>&1 | grep http_realip_module') == 0 -%} | |||||
{% if 'set_real_ips' in nginx -%} | |||||
{% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%} | {% for ip in nginx.get('set_real_ips', {}).get('ips', []) -%} | ||||
set_real_ip_from {{ ip }}; | set_real_ip_from {{ ip }}; | ||||
{% endfor -%} | {% endfor -%} |
use_upstart: True | use_upstart: True | ||||
with_luajit: False | with_luajit: False | ||||
with_openresty: True | with_openresty: True | ||||
set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled | |||||
ips: | |||||
- 10.10.10.0/24 | |||||
real_ip_header: X-Forwarded-For | |||||
modules: | modules: | ||||
headers-more: | headers-more: | ||||
source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21 | source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21 |