adding before some work

Nginx.kube.yaml

@@ -35,6 +35,12 @@ spec:
 #          mountPath: /etc/nginx/conf.d/random.conf
         - name: nginx-sites-terraform
           mountPath: /etc/nginx/conf.d/
+        - mountPath: /var/log/nginx/
+          name: reverse-proxy-log
+        - name: extra-sites-terraform
+          mountPath: /etc/nginx/extra.conf.d/
+        - name: deny-ip-terraform
+          mountPath: /etc/nginx/deny.d/
         - name: reverse-proxy-ssl
           mountPath: /etc/nginx/ssl/
         - mountPath: /etc/nginx/
@@ -48,6 +54,9 @@ spec:
               cpu: 250m
               memory: 250Mi
       volumes:
+      - name: reverse-proxy-log
+        persistentVolumeClaim:
+          claimName: reverse-proxy-log
       - name: reverse-proxy-ssl
         hostPath:
            path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
@@ -55,6 +64,7 @@ spec:
           path: /opt/kubernetes/Reverse_proxy_Nginx/random.conf
           type: File
         name: reverse-proxy-conf-randomfile
+
       - name: nginx-configfile
         configMap:
           name: nginx-config
@@ -63,6 +73,14 @@ spec:
         configMap:
           name: sites-terraform
           defaultMode: 0555
+      - name: extra-sites-terraform
+        configMap:
+          name: extra-sites-terraform
+          defaultMode: 0555
+      - name: deny-ip-terraform
+        configMap:
+          name: deny-ip-terraform
+          defaultMode: 0555
       - name: proxy-cache-path-volume
         emptyDir:
           medium: Memory

nginx.conf

@@ -21,7 +21,11 @@ http {
         
 	#custom log format to display the webiste visited and the IP used
 	log_format my_custom_format '$http_host \t $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"';
-
+        log_format ip_audit '$remote_addr [$time_local]';
+        log_format backend_debug '$remote_addr - $remote_user [$time_local] '
+                             '"$request" $status $body_bytes_sent '
+                             '"$http_referer" "$http_user_agent" '
+                             'upstream_status=$upstream_status';
 
 	server {
 	listen 80;
@@ -44,7 +48,13 @@ http {
         ''      close;
 	}
 
+	include /etc/nginx/deny.d/*.conf;
 	include /etc/nginx/conf.d/*.conf;
+		
+	#add extra file for any extra work 
+        include /etc/nginx/extra.conf.d/*.conf;
+
+
 	resolver 127.0.0.1 ipv6=off valid=40s;  # The DNS IP server
 	
 	#https://www.tweaked.io/guide/nginx-proxying/

pvc.claim.yaml

@@ -0,0 +1,12 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: reverse-proxy-log
+  namespace: reverse-proxy
+spec:
+  storageClassName: nfs-storage-intelligent
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 200Mi