From f3aa767cd5a3407c782017cc4438325ab35e8fba Mon Sep 17 00:00:00 2001
From: pierre <pierre@geeraert.eu>
Date: Mon, 26 Jan 2026 22:16:52 +0000
Subject: [PATCH] adding before some work

---
 Nginx.kube.yaml | 18 ++++++++++++++++++
 nginx.conf      | 12 +++++++++++-
 pvc.claim.yaml  | 12 ++++++++++++
 3 files changed, 41 insertions(+), 1 deletion(-)
 create mode 100644 pvc.claim.yaml

diff --git a/Nginx.kube.yaml b/Nginx.kube.yaml
index 33ceeb2..23e5923 100644
--- a/Nginx.kube.yaml
+++ b/Nginx.kube.yaml
@@ -35,6 +35,12 @@ spec:
 #          mountPath: /etc/nginx/conf.d/random.conf
         - name: nginx-sites-terraform
           mountPath: /etc/nginx/conf.d/
+        - mountPath: /var/log/nginx/
+          name: reverse-proxy-log
+        - name: extra-sites-terraform
+          mountPath: /etc/nginx/extra.conf.d/
+        - name: deny-ip-terraform
+          mountPath: /etc/nginx/deny.d/
         - name: reverse-proxy-ssl
           mountPath: /etc/nginx/ssl/
         - mountPath: /etc/nginx/
@@ -48,6 +54,9 @@ spec:
               cpu: 250m
               memory: 250Mi
       volumes:
+      - name: reverse-proxy-log
+        persistentVolumeClaim:
+          claimName: reverse-proxy-log
       - name: reverse-proxy-ssl
         hostPath:
            path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
@@ -55,6 +64,7 @@ spec:
           path: /opt/kubernetes/Reverse_proxy_Nginx/random.conf
           type: File
         name: reverse-proxy-conf-randomfile
+
       - name: nginx-configfile
         configMap:
           name: nginx-config
@@ -63,6 +73,14 @@ spec:
         configMap:
           name: sites-terraform
           defaultMode: 0555
+      - name: extra-sites-terraform
+        configMap:
+          name: extra-sites-terraform
+          defaultMode: 0555
+      - name: deny-ip-terraform
+        configMap:
+          name: deny-ip-terraform
+          defaultMode: 0555
       - name: proxy-cache-path-volume
         emptyDir:
           medium: Memory
diff --git a/nginx.conf b/nginx.conf
index 729f42b..5079ac6 100755
--- a/nginx.conf
+++ b/nginx.conf
@@ -21,7 +21,11 @@ http {
         
 	#custom log format to display the webiste visited and the IP used
 	log_format my_custom_format '$http_host \t $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"';
-
+        log_format ip_audit '$remote_addr [$time_local]';
+        log_format backend_debug '$remote_addr - $remote_user [$time_local] '
+                             '"$request" $status $body_bytes_sent '
+                             '"$http_referer" "$http_user_agent" '
+                             'upstream_status=$upstream_status';
 
 	server {
 	listen 80;
@@ -44,7 +48,13 @@ http {
         ''      close;
 	}
 
+	include /etc/nginx/deny.d/*.conf;
 	include /etc/nginx/conf.d/*.conf;
+		
+	#add extra file for any extra work 
+        include /etc/nginx/extra.conf.d/*.conf;
+
+
 	resolver 127.0.0.1 ipv6=off valid=40s;  # The DNS IP server
 	
 	#https://www.tweaked.io/guide/nginx-proxying/
diff --git a/pvc.claim.yaml b/pvc.claim.yaml
new file mode 100644
index 0000000..8318d92
--- /dev/null
+++ b/pvc.claim.yaml
@@ -0,0 +1,12 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: reverse-proxy-log
+  namespace: reverse-proxy
+spec:
+  storageClassName: nfs-storage-intelligent
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 200Mi