add dnsmasq pi server
This commit is contained in:
@@ -1,5 +1,7 @@
|
||||
load_module /usr/lib64/nginx/modules/ngx_stream_module.so;
|
||||
|
||||
worker_processes 8;
|
||||
|
||||
events {}
|
||||
|
||||
stream {
|
||||
@@ -12,19 +14,19 @@ stream {
|
||||
# Map all SSL parsed server names to hosts
|
||||
map $ssl_preread_server_name $name {
|
||||
|
||||
"" 127.0.0.1;
|
||||
"" 127.0.0.1:443;
|
||||
|
||||
# For each domain we need to stream to a remote server, forward to internal domain
|
||||
{% for domain in stream_ssl %}
|
||||
{{ domain.external_domain }} {{ domain.internal_domain }};
|
||||
{{ domain.external_domain }} {{ domain.internal_domain }}:{{ domain.internal_port }};
|
||||
{% endfor %}
|
||||
|
||||
# For each domain we want to terminate, forward to internal http server
|
||||
{% for domain in terminate_ssl %}
|
||||
{{ domain.external_domain }} 127.0.0.1;
|
||||
{{ domain.external_domain }} 127.0.0.1:443;
|
||||
{% endfor %}
|
||||
|
||||
default {{ nginx.defaults.domain }};
|
||||
default {{ nginx.defaults.domain }}:443;
|
||||
}
|
||||
|
||||
# Forward 80 traffic
|
||||
@@ -32,8 +34,9 @@ stream {
|
||||
access_log /var/log/nginx/stream-access-80.log basic;
|
||||
listen {{ ansible_default_ipv4.address }}:80;
|
||||
resolver 1.1.1.1;
|
||||
proxy_pass $name:80;
|
||||
proxy_pass $name;
|
||||
ssl_preread on;
|
||||
proxy_socket_keepalive on;
|
||||
}
|
||||
|
||||
# Forward 443 traffic
|
||||
@@ -41,8 +44,9 @@ stream {
|
||||
access_log /var/log/nginx/stream-access-443.log basic;
|
||||
listen {{ ansible_default_ipv4.address }}:443;
|
||||
resolver 1.1.1.1;
|
||||
proxy_pass $name:443;
|
||||
proxy_pass $name;
|
||||
ssl_preread on;
|
||||
proxy_socket_keepalive on;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user