]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
BERFBB-3340 added real_ip setting on tst
authorsambufe <samuel.bufe@publicispixelpark.de>
Thu, 27 Jul 2017 14:03:42 +0000 (16:03 +0200)
committersambufe <samuel.bufe@publicispixelpark.de>
Thu, 27 Jul 2017 14:03:42 +0000 (16:03 +0200)
customer/fbb-web/test.yaml

index f34598c597028bcff0a374a5b1dbcea27a371aaf..204f05d5055791ad9ff15874082f805e23578de8 100644 (file)
@@ -256,15 +256,27 @@ infra::profile::nginx_php_fpm_server::vhosts:
       #      - '/wp-admin$ $scheme://$host$uri/ permanent'
       #      - '/files/$ /index.php last'
     #BERFBB-3340
+    location_raw_prepend:
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'real_ip_header X-Forwarded-For;'
+      - 'real_ip_recursive on;'
     location_allow:
-      - '172.16.0.11/21'
+      # SXF/BER IP's:
+      # DHCP-Subnet
+      - '172.16.0.0/21'
+      # reserved range
       - '172.16.8.0/21'
+      # TXL IP's:
+      # DHCP-Subnets
       - '172.32.0.0/15'
       - '172.34.0.0/15'
       - '172.36.0.0/15'
       - '172.38.0.0/16'
       - '172.39.0.0/21'
-      - '172.16.40.0/19'
+      # reserved range
+      - '172.16.32.0/19'
+      # pixelpark IP's
       - '217.66.49.0/24'
       - '217.66.50.0/24'
       - '217.66.51.0/24'
@@ -306,15 +318,27 @@ infra::profile::nginx_php_fpm_server::vhosts:
 #      - '/wp-admin$ $scheme://$host$uri/ permanent'
 #      - '/files/$ /index.php last'
     #BERFBB-3340
+    location_raw_prepend:
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'real_ip_header X-Forwarded-For;'
+      - 'real_ip_recursive on;'
     location_allow:
-      - '172.16.0.11/21'
+      # SXF/BER IP's:
+      # DHCP-Subnet
+      - '172.16.0.0/21'
+      # reserved range
       - '172.16.8.0/21'
+      # TXL IP's:
+      # DHCP-Subnets
       - '172.32.0.0/15'
       - '172.34.0.0/15'
       - '172.36.0.0/15'
       - '172.38.0.0/16'
       - '172.39.0.0/21'
-      - '172.16.40.0/19'
+      # reserved range
+      - '172.16.32.0/19'
+      # pixelpark IP's
       - '217.66.49.0/24'
       - '217.66.50.0/24'
       - '217.66.51.0/24'