james/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

httpd / websites: do not enable anubis in internal proxies

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-10-13 10:37:01 -07:00
commit 3565e5634c
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/httpd/website/templates/website.conf
View file

@ -42,7 +42,7 @@
{% endif %}
</VirtualHost>
{% if anubis %}
{% if anubis and not inventory_hostname in groups['proxies_internal'] %}
<VirtualHost *:8345>
ServerName {{ site_name }}
{% if server_aliases %}
@ -129,7 +129,7 @@
{% if sslonly %}
Header always add Strict-Transport-Security "max-age=31536000; {% if stssubdomains %}includeSubDomains; {% endif %}preload"
{% endif %}
{% if anubis %}
{% if anubis and not inventory_hostname in groups['proxies_internal'] %}
# proxy all requests to anubis after ssl termination
RequestHeader set "X-Real-Ip" expr=%{REMOTE_ADDR}