From a27a86ce6b90c58f06d4b928bfd9b3571edf9add Mon Sep 17 00:00:00 2001 From: Beta Date: Thu, 23 Oct 2025 18:28:51 -0300 Subject: [PATCH] asi seria dejar todo esto default para todos los vhosts pero especificarlos en roles/proxy/files/custom, los sobrescribiria a estos o no? es deseable que si cerraria PR #65 --- .../files/custom_proxy_includes/sutty.abyaya.la | 11 ----------- .../files/custom_server_includes/sutty.abyaya.la | 4 ---- roles/proxy/templates/common.conf | 4 ++++ roles/proxy/templates/default_proxy.conf | 14 ++++++++++++++ 4 files changed, 18 insertions(+), 15 deletions(-) diff --git a/roles/proxy/files/custom_proxy_includes/sutty.abyaya.la b/roles/proxy/files/custom_proxy_includes/sutty.abyaya.la index 7cc54b6..e69de29 100644 --- a/roles/proxy/files/custom_proxy_includes/sutty.abyaya.la +++ b/roles/proxy/files/custom_proxy_includes/sutty.abyaya.la @@ -1,11 +0,0 @@ -proxy_buffering off; -proxy_request_buffering off; -proxy_redirect off; -proxy_connect_timeout 3m; -proxy_send_timeout 3m; -proxy_read_timeout 3m; - -limit_conn connection_limit 50; -limit_req zone=request_limit nodelay burst=20; - -add_header Retry-After $retry_after always; diff --git a/roles/proxy/files/custom_server_includes/sutty.abyaya.la b/roles/proxy/files/custom_server_includes/sutty.abyaya.la index beaa8f8..e69de29 100644 --- a/roles/proxy/files/custom_server_includes/sutty.abyaya.la +++ b/roles/proxy/files/custom_server_includes/sutty.abyaya.la @@ -1,4 +0,0 @@ -add_header X-Frame-Options "sameorigin"; -add_header X-XSS-Protection "1; mode=block"; -add_header X-Content-Type-Options "nosniff"; -add_header Referrer-Policy "strict-origin-when-cross-origin"; diff --git a/roles/proxy/templates/common.conf b/roles/proxy/templates/common.conf index e69de29..d7ff2cb 100644 --- a/roles/proxy/templates/common.conf +++ b/roles/proxy/templates/common.conf @@ -0,0 +1,4 @@ + add_header X-Frame-Options "sameorigin"; + add_header X-XSS-Protection "1; mode=block"; + add_header X-Content-Type-Options "nosniff"; + add_header Referrer-Policy "strict-origin-when-cross-origin"; diff --git a/roles/proxy/templates/default_proxy.conf b/roles/proxy/templates/default_proxy.conf index a2c8627..1da7fac 100644 --- a/roles/proxy/templates/default_proxy.conf +++ b/roles/proxy/templates/default_proxy.conf @@ -12,7 +12,9 @@ gzip_disable "msie6"; {% endif %} + client_max_body_size 1G; + proxy_ssl_verify off; proxy_ssl_server_name on; proxy_ssl_name $ssl_server_name; @@ -27,6 +29,18 @@ proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection upgrade; + proxy_buffering off; + proxy_request_buffering off; + proxy_redirect off; + proxy_connect_timeout 3m; + proxy_send_timeout 3m; + proxy_read_timeout 3m; + + limit_conn connection_limit 50; + limit_req zone=request_limit nodelay burst=20; + + add_header Retry-After $retry_after always; + {% include "files/custom_proxy_includes/" ~ vhost.domains[0] ignore missing %} } # END PROXY -- 2.49.0