From 2ad54d0a9cef75b4743fd94b73a0a5a00c25bbae Mon Sep 17 00:00:00 2001 From: Philipp Dallig Date: Fri, 16 Dec 2016 09:42:08 +0100 Subject: [PATCH] pixelpark-chat - anpassungen --- customer/pixelpark/chat01.pixelpark.com.yaml | 29 ++++++-------------- 1 file changed, 9 insertions(+), 20 deletions(-) diff --git a/customer/pixelpark/chat01.pixelpark.com.yaml b/customer/pixelpark/chat01.pixelpark.com.yaml index 459c153f..e01eb6a1 100644 --- a/customer/pixelpark/chat01.pixelpark.com.yaml +++ b/customer/pixelpark/chat01.pixelpark.com.yaml @@ -26,6 +26,9 @@ site::profile::mongodb_server::backup::db_password: ENC[PKCS7,MIIBiQYJKoZIhvcNAQ rocket_password: ENC[PKCS7,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] nginx::config::proxy_hide_header: - X-Powered-By +nginx::config::http_tcp_nopush: 'on' +nginx::config::gzip_types: 'text/plain text/css text/javascript application/x-javascript application/xml text/xml application/json application/javascript application/xml+rss text/x-js' +nginx::config::gzip_comp_level: 9 nginx::nginx_vhosts: rocket-chat: server_name: @@ -45,33 +48,19 @@ nginx::nginx_vhosts: X-XSS-Protection: '"1; mode=block"' X-Frame-Options: DENY proxy_set_header: + - 'Host $host:$server_port' - 'Upgrade $http_upgrade' - 'Connection "upgrade"' - 'Host $host' - 'X-Real-IP $remote_addr' - 'X-Forwarded-For $proxy_add_x_forwarded_for' - - 'X-Forwarded-Proto $scheme' - - 'X-Frame-Options SAMEORIGIN' + - 'X-Forwarded-Proto https' - 'X-Forwarded-Ssl on' + - 'X-Nginx-Proxy true' + - 'Referer $http_referer' client_max_body_size: '50m' - locations: - '/api/info': - location_allow: - - '127.0.0.0/8' - - '217.66.51.0/24' - location_deny: - - 'all' - proxy_set_header: - - 'Upgrade $http_upgrade' - - 'Connection "upgrade"' - - 'Host $host' - - 'X-Real-IP $remote_addr' - - 'X-Forwarded-For $proxy_add_x_forwarded_for' - - 'X-Forwarded-Proto $scheme' - - 'X-Frame-Options SAMEORIGIN' - - 'X-Forwarded-Ssl on' - proxy: http://rocket_chat - + error_pages: + 497: https://$host:$server_port$request_uri nginx::nginx_upstreams: rocket_chat: members: -- 2.39.5