DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge 26b32abce0 into 41cefeb178

Browse source
This commit is contained in:
Dan Clayton 2018-03-16 21:02:34 +00:00 committed by GitHub
commit 4220399655
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
rootfs/etc/nginx/template/nginx.tmpl
View file

@ -36,12 +36,8 @@ events {
}
http {
{{/* we use the value of the header X-Forwarded-For to be able to use the geo_ip module */}}
{{ if $cfg.UseProxyProtocol }}
real_ip_header proxy_protocol;
{{ else }}
real_ip_header {{ $cfg.ForwardedForHeader }};
{{ end }}
real_ip_header $real_ip_header;
real_ip_recursive on;
{{ range $trusted_ip := $cfg.ProxyRealIPCIDR }}
@ -181,13 +177,19 @@ http {
'' close;
}
map {{ buildForwardedFor $cfg.ForwardedForHeader }} $the_real_ip {
{{ if $cfg.UseProxyProtocol }}
map $pass_server_port $real_ip_header {
{{ $all.ListenPorts.SSLProxy }} proxy_protocol;
default {{ $cfg.ForwardedForHeader }};
}
map $real_ip_header $the_real_ip {
# Get IP address from Proxy Protocol
proxy_protocol $proxy_protocol_addr;
{{ if $all.Cfg.UseProxyProtocol }}
default $proxy_protocol_addr;
{{ else }}
{{ else }}
default $remote_addr;
{{ end }}
{{ end }}
}
# trust http_x_forwarded_proto headers correctly indicate ssl offloading