diff options
| author | Johannes Löthberg <johannes@kyriasis.com> | 2024-06-08 23:31:06 +0200 |
|---|---|---|
| committer | Johannes Löthberg <johannes@kyriasis.com> | 2024-06-08 23:31:06 +0200 |
| commit | 2ebdc54ea23cb57e1fa7ee03420e3f34dca2363e (patch) | |
| tree | c8e710abee097a5823e9b71966f4974a3cdb9623 /nginx | |
| parent | d190afd6d525e66587e0f7c46b308de524afb4cc (diff) | |
| download | pillar-2ebdc54ea23cb57e1fa7ee03420e3f34dca2363e.tar.xz | |
Stop including old X-Forwarded-For and include port
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
Diffstat (limited to 'nginx')
| -rw-r--r-- | nginx/gallery_remmy_foo.sls | 2 | ||||
| -rw-r--r-- | nginx/miniflux_kyriasis_com.sls | 2 | ||||
| -rw-r--r-- | nginx/pie_in_the_sky_kitchen.sls | 2 | ||||
| -rw-r--r-- | nginx/theos_kyriasis_com.sls | 4 | ||||
| -rw-r--r-- | nginx/vault_kyriasis_com.sls | 2 |
5 files changed, 6 insertions, 6 deletions
diff --git a/nginx/gallery_remmy_foo.sls b/nginx/gallery_remmy_foo.sls index 2cb9569..9675d1b 100644 --- a/nginx/gallery_remmy_foo.sls +++ b/nginx/gallery_remmy_foo.sls @@ -60,7 +60,7 @@ nginx: - proxy_set_header: X-Forwarded-Proto https - proxy_set_header: X-Forwarded-Host $host - proxy_set_header: X-Forwarded-Server $host - - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for + - proxy_set_header: 'X-Forwarded-For $remote_addr:$remote_port' gallery-static.remmy.foo: diff --git a/nginx/miniflux_kyriasis_com.sls b/nginx/miniflux_kyriasis_com.sls index 676b67b..9c3773e 100644 --- a/nginx/miniflux_kyriasis_com.sls +++ b/nginx/miniflux_kyriasis_com.sls @@ -53,7 +53,7 @@ nginx: - proxy_pass: http://127.0.0.1:8080 - proxy_redirect: 'off' - proxy_set_header: X-Real-IP $remote_addr - - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for + - proxy_set_header: X-Forwarded-For $remote_addr - proxy_set_header: X-Forwarded-Host $server_name - location /.well-known/acme-challenge: diff --git a/nginx/pie_in_the_sky_kitchen.sls b/nginx/pie_in_the_sky_kitchen.sls index 4f42d5f..86fd52c 100644 --- a/nginx/pie_in_the_sky_kitchen.sls +++ b/nginx/pie_in_the_sky_kitchen.sls @@ -65,6 +65,6 @@ nginx: - proxy_set_header: X-Forwarded-Proto https - proxy_set_header: X-Forwarded-Host $host - proxy_set_header: X-Forwarded-Server $host - - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for + - proxy_set_header: 'X-Forwarded-For $remote_addr:$remote_port' # vim: ft=yaml et: diff --git a/nginx/theos_kyriasis_com.sls b/nginx/theos_kyriasis_com.sls index 61d3d41..d7f7bc0 100644 --- a/nginx/theos_kyriasis_com.sls +++ b/nginx/theos_kyriasis_com.sls @@ -84,7 +84,7 @@ nginx: - proxy_pass: https://127.0.0.1:6697 - proxy_redirect: 'off' - proxy_set_header: X-Real-IP $remote_addr - - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for + - proxy_set_header: 'X-Forwarded-For $remote_addr:$remote_port' - proxy_set_header: X-Forwarded-Host $server_name - location /prometheus/: @@ -93,7 +93,7 @@ nginx: - location /rspamd/: - proxy_pass: http://localhost:11334/ - proxy_set_header: Host $host - - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for + - proxy_set_header: 'X-Forwarded-For $remote_addr:$remote_port' # vim: ft=yaml et: diff --git a/nginx/vault_kyriasis_com.sls b/nginx/vault_kyriasis_com.sls index e322883..758dd7b 100644 --- a/nginx/vault_kyriasis_com.sls +++ b/nginx/vault_kyriasis_com.sls @@ -64,7 +64,7 @@ nginx: - proxy_set_header: 'Upgrade $http_upgrade' - proxy_set_header: 'Connection $connection_upgrade' - proxy_set_header: X-Real-IP $remote_addr - - proxy_set_header: X-Forwarded-For $proxy_add_x_forwarded_for + - proxy_set_header: 'X-Forwarded-For $remote_addr:$remote_port' - proxy_set_header: X-Forwarded-Proto $scheme - proxy_set_header: X-Forwarded-Host $server_name |