2023-01-17 21:43:32 +01:00
|
|
|
#RISOTTO: do not compare
|
2023-06-23 08:12:05 +02:00
|
|
|
client_max_body_size {{ nginx_post_max_size }}M;
|
2022-03-08 19:42:28 +01:00
|
|
|
client_body_buffer_size 128k;
|
|
|
|
|
2023-06-23 08:12:05 +02:00
|
|
|
server_names_hash_bucket_size {{ nginx_hash_bucket_size }};
|
2022-03-08 19:42:28 +01:00
|
|
|
proxy_buffer_size 16k;
|
|
|
|
proxy_buffers 6 32k;
|
|
|
|
proxy_busy_buffers_size 32k;
|
|
|
|
large_client_header_buffers 8 8k;
|
|
|
|
|
|
|
|
client_body_temp_path /var/tmp/client_body;
|
|
|
|
proxy_temp_path /var/tmp/proxy;
|
|
|
|
fastcgi_temp_path /var/tmp/fastcgi;
|
|
|
|
uwsgi_temp_path /var/tmp/uwsgi;
|
|
|
|
scgi_temp_path /var/tmp/scgi;
|
2023-06-23 08:12:05 +02:00
|
|
|
|
|
|
|
|
|
|
|
# Always trust ourself
|
|
|
|
{% for interface in range(zones_list|length) %}
|
|
|
|
set_real_ip_from {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }};
|
|
|
|
{% endfor %}
|
|
|
|
{% if 'revprox' in general %}
|
2022-03-08 19:42:28 +01:00
|
|
|
# Define globally trusted reverse proxy
|
2023-06-23 08:12:05 +02:00
|
|
|
set_real_ip_from {{ general.revprox.revprox_client_server_ip }};
|
|
|
|
{% endif %}
|
2022-03-08 19:42:28 +01:00
|
|
|
real_ip_recursive on;
|