add suggested change; correct indent
This commit is contained in:
parent
deeefac84c
commit
7ee6927ca9
@ -11,3 +11,11 @@ This will serve a statuspage to the hosting machine only. Useful for monitoring
|
||||
```yaml
|
||||
matrix_nginx_proxy_nginx_status_enabled: true
|
||||
```
|
||||
|
||||
In default ```matrix_nginx_proxy_nginx_status_enabled``` will add the local ip adress. If you wish to listen to other ip-adresses provide a list:
|
||||
|
||||
```yaml
|
||||
matrix_nginx_proxy_nginx_status_allowed_addresses:
|
||||
- 8.8.8.8
|
||||
- 1.1.1.1
|
||||
```
|
||||
|
@ -1,7 +1,5 @@
|
||||
matrix_nginx_proxy_enabled: true
|
||||
|
||||
matrix_nginx_proxy_nginx_status_enabled: false
|
||||
|
||||
# We use an official nginx image, which we fix-up to run unprivileged.
|
||||
# An alternative would be an `nginxinc/nginx-unprivileged` image, but
|
||||
# those as more frequently out of date.
|
||||
@ -142,3 +140,8 @@ matrix_ssl_lets_encrypt_support_email: ~
|
||||
matrix_ssl_base_path: "{{ matrix_base_data_path }}/ssl"
|
||||
matrix_ssl_config_dir_path: "{{ matrix_ssl_base_path }}/config"
|
||||
matrix_ssl_log_dir_path: "{{ matrix_ssl_base_path }}/log"
|
||||
|
||||
|
||||
# ngnix status page configurations.
|
||||
matrix_nginx_proxy_nginx_status_enabled: false
|
||||
matrix_nginx_proxy_nginx_status_allowed_addresses: ['{{ ansible_default_ipv4.address }}']
|
||||
|
@ -4,25 +4,27 @@ server {
|
||||
|
||||
server_tokens off;
|
||||
|
||||
{% if matrix_nginx_proxy_nginx_status_enabled %}
|
||||
location /nginx_status {
|
||||
stub_status on;
|
||||
access_log off;
|
||||
allow {{ ansible_default_ipv4.address }};
|
||||
deny all;
|
||||
}
|
||||
{% endif %}
|
||||
{% if matrix_nginx_proxy_nginx_status_enabled %}
|
||||
location /nginx_status {
|
||||
stub_status on;
|
||||
access_log off;
|
||||
{% for address in matrix_nginx_proxy_nginx_status_allowed_addresses %}
|
||||
allow {{ address }};
|
||||
{% endfor %}
|
||||
deny all;
|
||||
}
|
||||
{% endif %}
|
||||
|
||||
location /.well-known/acme-challenge {
|
||||
{% if matrix_nginx_proxy_enabled %}
|
||||
{% if matrix_nginx_proxy_enabled %}
|
||||
{# Use the embedded DNS resolver in Docker containers to discover the service #}
|
||||
resolver 127.0.0.11 valid=5s;
|
||||
set $backend "matrix-certbot:8080";
|
||||
proxy_pass http://$backend;
|
||||
{% else %}
|
||||
{% else %}
|
||||
{# Generic configuration for use outside of our container setup #}
|
||||
proxy_pass http://127.0.0.1:{{ matrix_ssl_lets_encrypt_certbot_standalone_http_port }};
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
}
|
||||
|
||||
location / {
|
||||
|
Loading…
Reference in New Issue
Block a user