infra/ansible-role-nginx
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add more proxy headers

Browse source
This commit is contained in:
nd 2019-02-10 22:14:27 +01:00
parent d0e8250cbc
commit 9097dea693
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
templates/vhost.j2
View file

@ -3,7 +3,9 @@
{% set vhost_listen = vhost.listen|default({}) %}
server {
{% if vhost.servername|default([])|length > 0 %}
server_name {{ vhost.servername|join(' ') }};
{% endif %}
{% if vhost_listen.ssl|default(True) %}
listen {{ vhost_listen.ssl_port|default(443) }} ssl {% if vhost.default_server|default(False) %}default_server{% endif %};
@ -22,6 +24,9 @@ server {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Protocol $scheme;
proxy_set_header X-Forwarded-Ssl $https;
proxy_set_header X-Url-Scheme $scheme;
# hide downstream headers for security reasons
proxy_hide_header X-Powered-By;