From: sambufe <samuel.bufe@publicispixelpark.de>
Date: Thu, 27 Jul 2017 14:03:42 +0000 (+0200)
Subject: BERFBB-3340 added real_ip setting on tst
X-Git-Tag: v0.1.0~2666^2~69^2~6
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=ea5dbb47f95407b4a87ed9ac5ae53aa5eda6c256;p=pixelpark%2Fhiera.git

BERFBB-3340 added real_ip setting on tst
---

diff --git a/customer/fbb-web/test.yaml b/customer/fbb-web/test.yaml
index f34598c5..204f05d5 100644
--- a/customer/fbb-web/test.yaml
+++ b/customer/fbb-web/test.yaml
@@ -256,15 +256,27 @@ infra::profile::nginx_php_fpm_server::vhosts:
       #      - '/wp-admin$ $scheme://$host$uri/ permanent'
       #      - '/files/$ /index.php last'
     #BERFBB-3340
+    location_raw_prepend:
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'real_ip_header X-Forwarded-For;'
+      - 'real_ip_recursive on;'
     location_allow:
-      - '172.16.0.11/21'
+      # SXF/BER IP's:
+      # DHCP-Subnet
+      - '172.16.0.0/21'
+      # reserved range
       - '172.16.8.0/21'
+      # TXL IP's:
+      # DHCP-Subnets
       - '172.32.0.0/15'
       - '172.34.0.0/15'
       - '172.36.0.0/15'
       - '172.38.0.0/16'
       - '172.39.0.0/21'
-      - '172.16.40.0/19'
+      # reserved range
+      - '172.16.32.0/19'
+      # pixelpark IP's
       - '217.66.49.0/24'
       - '217.66.50.0/24'
       - '217.66.51.0/24'
@@ -306,15 +318,27 @@ infra::profile::nginx_php_fpm_server::vhosts:
 #      - '/wp-admin$ $scheme://$host$uri/ permanent'
 #      - '/files/$ /index.php last'
     #BERFBB-3340
+    location_raw_prepend:
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'set_real_ip_from 93.188.107.121;'
+      - 'real_ip_header X-Forwarded-For;'
+      - 'real_ip_recursive on;'
     location_allow:
-      - '172.16.0.11/21'
+      # SXF/BER IP's:
+      # DHCP-Subnet
+      - '172.16.0.0/21'
+      # reserved range
       - '172.16.8.0/21'
+      # TXL IP's:
+      # DHCP-Subnets
       - '172.32.0.0/15'
       - '172.34.0.0/15'
       - '172.36.0.0/15'
       - '172.38.0.0/16'
       - '172.39.0.0/21'
-      - '172.16.40.0/19'
+      # reserved range
+      - '172.16.32.0/19'
+      # pixelpark IP's
       - '217.66.49.0/24'
       - '217.66.50.0/24'
       - '217.66.51.0/24'