crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

[nginx] Fix subnets for real_ip_from 

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
certbot_on_virtu
Yohann D'ANELLO 2021-06-21 15:31:52 +02:00 committed by ynerant
parent 06498604ac
commit 0cdd43facb
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
group_vars/nginx.yml
View File

@ -28,7 +28,7 @@ glob_nginx:
default_ssl_domain: crans.org default_ssl_domain: crans.org
real_ip_from: real_ip_from:
- "172.16.0.0/16" - "172.16.0.0/16"
- "fd00:0:0:10::/64" - "fd00::/56"
deploy_robots_file: false deploy_robots_file: false
glob_prometheus_nginx_exporter: glob_prometheus_nginx_exporter:

11
host_vars/rodauh.cachan-adm.crans.org.yml
View File

@ -26,6 +26,17 @@ loc_certbot:
certname: crans.org certname: crans.org
domains: "crans.org, *.crans.org, crans.fr, *.crans.fr, crans.eu, *.crans.eu" domains: "crans.org, *.crans.org, crans.fr, *.crans.fr, crans.eu, *.crans.eu"
loc_nginx:
servers: []
ssl:
- name: crans.org
cert: /etc/letsencrypt/live/crans.org/fullchain.pem
cert_key: /etc/letsencrypt/live/crans.org/privkey.pem
trusted_cert: /etc/letsencrypt/live/crans.org/chain.pem
real_ip_from:
- "172.17.0.0/16"
- "fd00:0:0:3000::/56"
loc_reverseproxy: loc_reverseproxy:
reverseproxy_sites: reverseproxy_sites:
- {from: ftps.crans.org, to: 172.17.10.30} - {from: ftps.crans.org, to: 172.17.10.30}