| Michel Nederlof | 734be5f | 2018-03-13 13:57:49 +0100 | [diff] [blame] | 1 | _dollar: '$' |
| 2 | salt: |
| 3 | minion: |
| 4 | enabled: true |
| 5 | nginx: |
| 6 | server: |
| 7 | enabled: true |
| 8 | extras: false |
| 9 | bind: |
| 10 | address: 127.0.0.1 |
| 11 | protocol: tcp |
| Vasyl Saienko | c14eca2 | 2018-12-07 09:46:17 +0000 | [diff] [blame] | 12 | geo: |
| 13 | enabled: true |
| 14 | items: |
| 15 | global_geo_limiting: |
| 16 | enabled: true |
| 17 | variable: ip_limit_key |
| 18 | body: |
| 19 | default: |
| 20 | value: '1' |
| 21 | unlimited_client1: |
| 22 | name: '10.12.100.1/32' |
| 23 | value: '0' |
| 24 | map: |
| 25 | enabled: true |
| 26 | items: |
| 27 | global_geo_limiting_map: |
| 28 | enabled: true |
| 29 | string: ip_limit_key |
| 30 | variable: ip_limit_action |
| 31 | body: |
| 32 | limited: |
| 33 | name: 1 |
| 34 | value: '$binary_remote_addr' |
| 35 | unlimited: |
| 36 | name: 0 |
| 37 | value: '""' |
| 38 | limit_req_module: |
| 39 | limit_req_zone: |
| 40 | global_limit_zone: |
| 41 | key: ip_limit_action |
| 42 | size: 10m |
| 43 | rate: '1r/s' |
| 44 | limit_req_status: 503 |
| Oleksandr Bryndzii | a26617c | 2018-12-07 17:36:42 +0000 | [diff] [blame] | 45 | limit_conn_module: |
| 46 | limit_conn_zone: |
| 47 | global_limit_conn_zone: |
| 48 | key: 'binary_remote_addr' |
| 49 | size: 20m |
| 50 | enabled: true |
| 51 | openstack_web_conn_zone: |
| 52 | key: 'binary_remote_addr' |
| 53 | size: 10m |
| 54 | enabled: true |
| 55 | limit_conn: |
| 56 | global_limit_conn_zone: |
| 57 | connections: 100 |
| 58 | enabled: true |
| 59 | limit_conn_status: 503 |
| Michel Nederlof | 734be5f | 2018-03-13 13:57:49 +0100 | [diff] [blame] | 60 | site: |
| 61 | nginx_proxy_site01: |
| 62 | enabled: true |
| 63 | type: nginx_proxy |
| 64 | name: site01 |
| 65 | proxy: |
| 66 | host: 127.0.0.1 |
| 67 | port: 808 |
| 68 | protocol: http |
| 69 | host: |
| 70 | name: cloudlab.domain.com |
| 71 | port: 31337 |
| Vasyl Saienko | c14eca2 | 2018-12-07 09:46:17 +0000 | [diff] [blame] | 72 | limit_req_module: |
| 73 | limit_req: |
| 74 | global_limit_zone: |
| 75 | burst: 5 |
| 76 | enabled: true |
| Oleksandr Bryndzii | a26617c | 2018-12-07 17:36:42 +0000 | [diff] [blame] | 77 | limit_conn_module: |
| 78 | limit_conn: |
| 79 | openstack_web_conn_zone: |
| 80 | connections: 50 |
| 81 | enabled: true |
| 82 | limit_conn_status: 503 |