adding before some work
This commit is contained in:
@@ -35,6 +35,12 @@ spec:
|
|||||||
# mountPath: /etc/nginx/conf.d/random.conf
|
# mountPath: /etc/nginx/conf.d/random.conf
|
||||||
- name: nginx-sites-terraform
|
- name: nginx-sites-terraform
|
||||||
mountPath: /etc/nginx/conf.d/
|
mountPath: /etc/nginx/conf.d/
|
||||||
|
- mountPath: /var/log/nginx/
|
||||||
|
name: reverse-proxy-log
|
||||||
|
- name: extra-sites-terraform
|
||||||
|
mountPath: /etc/nginx/extra.conf.d/
|
||||||
|
- name: deny-ip-terraform
|
||||||
|
mountPath: /etc/nginx/deny.d/
|
||||||
- name: reverse-proxy-ssl
|
- name: reverse-proxy-ssl
|
||||||
mountPath: /etc/nginx/ssl/
|
mountPath: /etc/nginx/ssl/
|
||||||
- mountPath: /etc/nginx/
|
- mountPath: /etc/nginx/
|
||||||
@@ -48,6 +54,9 @@ spec:
|
|||||||
cpu: 250m
|
cpu: 250m
|
||||||
memory: 250Mi
|
memory: 250Mi
|
||||||
volumes:
|
volumes:
|
||||||
|
- name: reverse-proxy-log
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: reverse-proxy-log
|
||||||
- name: reverse-proxy-ssl
|
- name: reverse-proxy-ssl
|
||||||
hostPath:
|
hostPath:
|
||||||
path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
|
path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
|
||||||
@@ -55,6 +64,7 @@ spec:
|
|||||||
path: /opt/kubernetes/Reverse_proxy_Nginx/random.conf
|
path: /opt/kubernetes/Reverse_proxy_Nginx/random.conf
|
||||||
type: File
|
type: File
|
||||||
name: reverse-proxy-conf-randomfile
|
name: reverse-proxy-conf-randomfile
|
||||||
|
|
||||||
- name: nginx-configfile
|
- name: nginx-configfile
|
||||||
configMap:
|
configMap:
|
||||||
name: nginx-config
|
name: nginx-config
|
||||||
@@ -63,6 +73,14 @@ spec:
|
|||||||
configMap:
|
configMap:
|
||||||
name: sites-terraform
|
name: sites-terraform
|
||||||
defaultMode: 0555
|
defaultMode: 0555
|
||||||
|
- name: extra-sites-terraform
|
||||||
|
configMap:
|
||||||
|
name: extra-sites-terraform
|
||||||
|
defaultMode: 0555
|
||||||
|
- name: deny-ip-terraform
|
||||||
|
configMap:
|
||||||
|
name: deny-ip-terraform
|
||||||
|
defaultMode: 0555
|
||||||
- name: proxy-cache-path-volume
|
- name: proxy-cache-path-volume
|
||||||
emptyDir:
|
emptyDir:
|
||||||
medium: Memory
|
medium: Memory
|
||||||
|
|||||||
+11
-1
@@ -21,7 +21,11 @@ http {
|
|||||||
|
|
||||||
#custom log format to display the webiste visited and the IP used
|
#custom log format to display the webiste visited and the IP used
|
||||||
log_format my_custom_format '$http_host \t $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"';
|
log_format my_custom_format '$http_host \t $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"';
|
||||||
|
log_format ip_audit '$remote_addr [$time_local]';
|
||||||
|
log_format backend_debug '$remote_addr - $remote_user [$time_local] '
|
||||||
|
'"$request" $status $body_bytes_sent '
|
||||||
|
'"$http_referer" "$http_user_agent" '
|
||||||
|
'upstream_status=$upstream_status';
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 80;
|
listen 80;
|
||||||
@@ -44,7 +48,13 @@ http {
|
|||||||
'' close;
|
'' close;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
include /etc/nginx/deny.d/*.conf;
|
||||||
include /etc/nginx/conf.d/*.conf;
|
include /etc/nginx/conf.d/*.conf;
|
||||||
|
|
||||||
|
#add extra file for any extra work
|
||||||
|
include /etc/nginx/extra.conf.d/*.conf;
|
||||||
|
|
||||||
|
|
||||||
resolver 127.0.0.1 ipv6=off valid=40s; # The DNS IP server
|
resolver 127.0.0.1 ipv6=off valid=40s; # The DNS IP server
|
||||||
|
|
||||||
#https://www.tweaked.io/guide/nginx-proxying/
|
#https://www.tweaked.io/guide/nginx-proxying/
|
||||||
|
|||||||
@@ -0,0 +1,12 @@
|
|||||||
|
kind: PersistentVolumeClaim
|
||||||
|
apiVersion: v1
|
||||||
|
metadata:
|
||||||
|
name: reverse-proxy-log
|
||||||
|
namespace: reverse-proxy
|
||||||
|
spec:
|
||||||
|
storageClassName: nfs-storage-intelligent
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 200Mi
|
||||||
Reference in New Issue
Block a user