diff --git a/pillars/roles/nginx/jellyfin.sls b/pillars/roles/nginx/jellyfin.sls index 153e2ec..ace1e18 100644 --- a/pillars/roles/nginx/jellyfin.sls +++ b/pillars/roles/nginx/jellyfin.sls @@ -4,6 +4,11 @@ nginx: https: port: 8096 prot: http + proxy_headers: + X-Forwarded-Protocol: $scheme + Upgrade: $http_upgrade + Connection: upgrade + portal: Media: diff --git a/pillars/roles/nginx/nextcloud.sls b/pillars/roles/nginx/nextcloud.sls index f820f5d..0130a1a 100644 --- a/pillars/roles/nginx/nextcloud.sls +++ b/pillars/roles/nginx/nextcloud.sls @@ -1,10 +1,3 @@ -nginx: - cloud: - auth: none - https: - port: 8080 - prot: http - portal: Misc: cloud: diff --git a/states/roles/maintain/nextcloud/bashrc b/states/roles/maintain/nextcloud.old/bashrc similarity index 100% rename from states/roles/maintain/nextcloud/bashrc rename to states/roles/maintain/nextcloud.old/bashrc diff --git a/states/roles/maintain/nextcloud/cron-override.conf b/states/roles/maintain/nextcloud.old/cron-override.conf similarity index 100% rename from states/roles/maintain/nextcloud/cron-override.conf rename to states/roles/maintain/nextcloud.old/cron-override.conf diff --git a/states/roles/maintain/nextcloud/init.sls b/states/roles/maintain/nextcloud.old/init.sls similarity index 100% rename from states/roles/maintain/nextcloud/init.sls rename to states/roles/maintain/nextcloud.old/init.sls diff --git a/states/roles/maintain/nextcloud/nextcloud-config.php b/states/roles/maintain/nextcloud.old/nextcloud-config.php similarity index 100% rename from states/roles/maintain/nextcloud/nextcloud-config.php rename to states/roles/maintain/nextcloud.old/nextcloud-config.php diff --git a/states/roles/maintain/nextcloud/nextcloud-php.ini b/states/roles/maintain/nextcloud.old/nextcloud-php.ini similarity index 99% rename from states/roles/maintain/nextcloud/nextcloud-php.ini rename to states/roles/maintain/nextcloud.old/nextcloud-php.ini index 703878c..7fb70d8 100644 --- a/states/roles/maintain/nextcloud/nextcloud-php.ini +++ b/states/roles/maintain/nextcloud.old/nextcloud-php.ini @@ -928,7 +928,7 @@ extension=intl ;extension=odbc ;zend_extension=opcache ;extension=pdo_dblib -;extension=pdo_mysql +extension=pdo_mysql ;extension=pdo_odbc ;extension=pdo_pgsql ;extension=pdo_sqlite diff --git a/states/roles/maintain/nextcloud/nextcloud.hook b/states/roles/maintain/nextcloud.old/nextcloud.hook similarity index 100% rename from states/roles/maintain/nextcloud/nextcloud.hook rename to states/roles/maintain/nextcloud.old/nextcloud.hook diff --git a/states/roles/maintain/nextcloud/nginx-collabora.conf b/states/roles/maintain/nextcloud.old/nginx-collabora.conf similarity index 100% rename from states/roles/maintain/nextcloud/nginx-collabora.conf rename to states/roles/maintain/nextcloud.old/nginx-collabora.conf diff --git a/states/roles/maintain/nextcloud/nginx-nextcloud.conf b/states/roles/maintain/nextcloud.old/nginx-nextcloud.conf similarity index 100% rename from states/roles/maintain/nextcloud/nginx-nextcloud.conf rename to states/roles/maintain/nextcloud.old/nginx-nextcloud.conf diff --git a/states/roles/maintain/nextcloud/php-fpm-nextcloud.conf b/states/roles/maintain/nextcloud.old/php-fpm-nextcloud.conf similarity index 100% rename from states/roles/maintain/nextcloud/php-fpm-nextcloud.conf rename to states/roles/maintain/nextcloud.old/php-fpm-nextcloud.conf diff --git a/states/roles/maintain/nextcloud/php-fpm-override.conf b/states/roles/maintain/nextcloud.old/php-fpm-override.conf similarity index 100% rename from states/roles/maintain/nextcloud/php-fpm-override.conf rename to states/roles/maintain/nextcloud.old/php-fpm-override.conf diff --git a/states/roles/maintain/nextcloud/php-fpm.ini b/states/roles/maintain/nextcloud.old/php-fpm.ini similarity index 100% rename from states/roles/maintain/nextcloud/php-fpm.ini rename to states/roles/maintain/nextcloud.old/php-fpm.ini diff --git a/states/roles/maintain/nginx-proxy/local.conf b/states/roles/maintain/nginx-proxy/local.conf index 4aed126..9dfd7d9 100644 --- a/states/roles/maintain/nginx-proxy/local.conf +++ b/states/roles/maintain/nginx-proxy/local.conf @@ -38,6 +38,11 @@ server { proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-Ssl on; +{%- if pillar['nginx'][server]['proxy_headers'] is defined -%} + {%- for header in pillar['nginx'][server]['proxy_headers'] %} + proxy_set_header {{header}} {{pillar['nginx'][server]['proxy_headers'][header]}}; + {%- endfor %} +{%- endif %} # re-write redirects to http as to https, example: /home proxy_redirect http:// https://; diff --git a/states/roles/maintain/nginx-proxy/remote.conf b/states/roles/maintain/nginx-proxy/remote.conf index 0613928..d567c2a 100644 --- a/states/roles/maintain/nginx-proxy/remote.conf +++ b/states/roles/maintain/nginx-proxy/remote.conf @@ -37,8 +37,17 @@ server { {% set location="2" %}{% include 'roles/maintain/nginx-proxy/auth.conf' %} proxy_pass $backend; proxy_set_header Host $host; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header X-Forwarded-Port 443; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header X-Forwarded-Ssl on; + +{%- if pillar['nginx'][server]['proxy_headers'] is defined -%} + {%- for header in pillar['nginx'][server]['proxy_headers'] %} + proxy_set_header {{header}} {{pillar['nginx'][server]['proxy_headers'][header]}}; + {%- endfor %} +{%- endif %} # re-write redirects to http as to https, example: /home proxy_redirect http:// https://;