nginx load balancing internal/external working

nginx/README.md

@@ -14,3 +14,18 @@ ansible-playbook -i ansible/inventory.yaml nginx/nginx.yaml
 
 We can detect whether traffic is originating internally or externally by checking if
 it came in on port 443 or 444.
+
+External traffic always come in through 444.
+
+## Certbot
+
+Use `certbot delete` to remove unused certs.
+
+## vars.yaml
+
+`allowed_ips` restricts access to the endpoint (deny all) and then allows only the list
+of ips provided.
+
+## Logging
+
+You can tail all the nginx logs with `tail -f /var/log/nginx/*`