Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

This will allow for X forwarded to be set for hosts which need it. [Currently only debuginfod]

Browse source
This commit is contained in:
Stephen Smoogen 2021-04-06 12:25:44 -04:00
parent 1284267f48
commit 5db5700936
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
playbooks/include/proxies-websites.yml
View file

@ -973,6 +973,7 @@
site_name: debuginfod.fedoraproject.org site_name: debuginfod.fedoraproject.org
sslonly: true sslonly: true
server_aliases: [debuginfod.stg.fedoraproject.org] server_aliases: [debuginfod.stg.fedoraproject.org]
x_forward: true
cert_name: "{{wildcard_cert_name}}" cert_name: "{{wildcard_cert_name}}"
tags: debuginfod tags: debuginfod

8
roles/httpd/website/templates/website.conf
View file

@ -6,7 +6,11 @@
ServerAdmin {{ server_admin }} ServerAdmin {{ server_admin }}
TraceEnable Off TraceEnable Off
{% if x_forward %}
# RequestHeader unset X-Forwarded-For
{% else %}
RequestHeader unset X-Forwarded-For RequestHeader unset X-Forwarded-For
{% endif %}
{% if gzip %} {% if gzip %}
SetOutputFilter DEFLATE SetOutputFilter DEFLATE
@ -46,7 +50,11 @@
{% endif %} {% endif %}
ServerAdmin {{ server_admin }} ServerAdmin {{ server_admin }}
{% if x_forward %}
# RequestHeader unset X-Forwarded-For
{% else %}
RequestHeader unset X-Forwarded-For RequestHeader unset X-Forwarded-For
{% endif %}
{% if ansible_distribution == 'Fedora' and use_h2 %} {% if ansible_distribution == 'Fedora' and use_h2 %}
Protocols h2 http/1.1 Protocols h2 http/1.1