ansible_roles/zen_rev_proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0.1.32-DEV-20200820-091636

Browse Source 
--------------------------
    * ADD:
      - added support for ip address to ignore logging from
This commit is contained in:
Chris Hammer 2020-08-20 09:17:04 -04:00
parent 5eadd2f852
commit 12c0ea232c
2 changed files with 17 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main/proxy_site_defs.yml
View File

@ -8,6 +8,9 @@
proxy_site_log_path : /proxy_logs proxy_site_log_path : /proxy_logs
proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log" proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log"
proxy_site_dontlog_ips :
- "10.1.1.*"
- "10.10.10.*"
proxy_site_ssl_directory : /etc/nginx/ssl proxy_site_ssl_directory : /etc/nginx/ssl

13
templates/proxy_site.j2
View File

@ -21,7 +21,18 @@ server {
ssl_ciphers {{ proxy_site_ssl_ciphers }}; ssl_ciphers {{ proxy_site_ssl_ciphers }};
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
access_log {{ proxy_site_log_path }}/{{ item.key }}.log; {% if proxy_site_dontlog_ips is defined %}
map $remote_addr $log_ip {
{% for item in proxy_site_dontlog_ips %}
"~{{ item }}" 1;
{% endfor %}
default 0;
}
access_log {{ proxy_site_log_path }}/{{ item.key }}.log if $log_ip;
{% else %}
access_log {{ proxy_site_log_path }}/{{ item.key }}.log;
{% endif %}
{% if proxy_sites[item.key]['max_upload'] is defined %} {% if proxy_sites[item.key]['max_upload'] is defined %}
client_max_body_size {{ proxy_sites[item.key]['max_upload'] }}; client_max_body_size {{ proxy_sites[item.key]['max_upload'] }};