]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
pixelpark-chat - anpassungen
authorPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 16 Dec 2016 08:42:08 +0000 (09:42 +0100)
committerPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 16 Dec 2016 08:42:08 +0000 (09:42 +0100)
customer/pixelpark/chat01.pixelpark.com.yaml

index 459c153f6c8bf5d1c7014f5586338679c87c2e97..e01eb6a1bd6f25028df44f9dcad8750cf9d18bef 100644 (file)
@@ -26,6 +26,9 @@ site::profile::mongodb_server::backup::db_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQ
 rocket_password: ENC[PKCS7,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]
 nginx::config::proxy_hide_header:
   - X-Powered-By
+nginx::config::http_tcp_nopush: 'on'
+nginx::config::gzip_types: 'text/plain text/css text/javascript application/x-javascript application/xml text/xml application/json application/javascript application/xml+rss text/x-js'
+nginx::config::gzip_comp_level: 9
 nginx::nginx_vhosts:
   rocket-chat:
     server_name:
@@ -45,33 +48,19 @@ nginx::nginx_vhosts:
       X-XSS-Protection: '"1; mode=block"'
       X-Frame-Options: DENY
     proxy_set_header:
+      - 'Host $host:$server_port'
       - 'Upgrade $http_upgrade'
       - 'Connection "upgrade"'
       - 'Host $host'
       - 'X-Real-IP $remote_addr'
       - 'X-Forwarded-For $proxy_add_x_forwarded_for'
-      - 'X-Forwarded-Proto $scheme'
-      - 'X-Frame-Options SAMEORIGIN'
+      - 'X-Forwarded-Proto https'
       - 'X-Forwarded-Ssl on'
+      - 'X-Nginx-Proxy true'
+      - 'Referer $http_referer'
     client_max_body_size: '50m'
-    locations:
-      '/api/info':
-        location_allow:
-          - '127.0.0.0/8'
-          - '217.66.51.0/24'
-        location_deny:
-          - 'all'
-        proxy_set_header:
-          - 'Upgrade $http_upgrade'
-          - 'Connection "upgrade"'
-          - 'Host $host'
-          - 'X-Real-IP $remote_addr'
-          - 'X-Forwarded-For $proxy_add_x_forwarded_for'
-          - 'X-Forwarded-Proto $scheme'
-          - 'X-Frame-Options SAMEORIGIN'
-          - 'X-Forwarded-Ssl on'
-        proxy: http://rocket_chat
-
+    error_pages:
+      497: https://$host:$server_port$request_uri
 nginx::nginx_upstreams:
   rocket_chat:
     members: