7e33272f84
more secure
Added SSL caching to speed up SSL requests
Add server_tokens to the global config so this can be turned on|off
between dev and prod
Add proxy_set_header to vhost as different vhosts may require different
headers and the global setting is not ideal
Minor space formatting so that the generated files are fractionally
more readable
69 lines
2 KiB
Puppet
69 lines
2 KiB
Puppet
# Class: nginx::params
|
|
#
|
|
# This module manages NGINX paramaters
|
|
#
|
|
# Parameters:
|
|
#
|
|
# There are no default parameters for this class.
|
|
#
|
|
# Actions:
|
|
#
|
|
# Requires:
|
|
#
|
|
# Sample Usage:
|
|
#
|
|
# This class file is not called directly
|
|
class nginx::params {
|
|
$nx_temp_dir = '/tmp'
|
|
$nx_run_dir = '/var/nginx'
|
|
|
|
$nx_conf_dir = '/etc/nginx'
|
|
$nx_confd_purge = false
|
|
$nx_worker_processes = 1
|
|
$nx_worker_connections = 1024
|
|
$nx_multi_accept = off
|
|
$nx_events_use = false # One of [kqueue|rtsig|epoll|/dev/poll|select|poll|eventport] or false to use OS default
|
|
$nx_sendfile = on
|
|
$nx_keepalive_timeout = 65
|
|
$nx_tcp_nodelay = on
|
|
$nx_gzip = on
|
|
$nx_server_tokens = on
|
|
|
|
$nx_proxy_redirect = off
|
|
$nx_proxy_set_header = [
|
|
'Host $host',
|
|
'X-Real-IP $remote_addr',
|
|
'X-Forwarded-For $proxy_add_x_forwarded_for',
|
|
]
|
|
|
|
$nx_client_body_temp_path = "${nx_run_dir}/client_body_temp"
|
|
$nx_client_body_buffer_size = '128k'
|
|
$nx_client_max_body_size = '10m'
|
|
$nx_proxy_temp_path = "${nx_run_dir}/proxy_temp"
|
|
$nx_proxy_connect_timeout = '90'
|
|
$nx_proxy_send_timeout = '90'
|
|
$nx_proxy_read_timeout = '90'
|
|
$nx_proxy_buffers = '32 4k'
|
|
|
|
$nx_logdir = $::kernel ? {
|
|
/(?i-mx:linux)/ => '/var/log/nginx',
|
|
}
|
|
|
|
$nx_pid = $::kernel ? {
|
|
/(?i-mx:linux)/ => '/var/run/nginx.pid',
|
|
}
|
|
|
|
$nx_daemon_user = $::operatingsystem ? {
|
|
/(?i-mx:debian|ubuntu)/ => 'www-data',
|
|
/(?i-mx:fedora|rhel|redhat|centos|scientific|suse|opensuse|amazon)/ => 'nginx',
|
|
}
|
|
|
|
# Service restart after Nginx 0.7.53 could also be just "/path/to/nginx/bin -s HUP"
|
|
# Some init scripts do a configtest, some don't. If configtest_enable it's true
|
|
# then service restart will take $nx_service_restart value, forcing configtest.
|
|
$nx_configtest_enable = false
|
|
$nx_service_restart = "/etc/init.d/nginx configtest && /etc/init.d/nginx restart"
|
|
|
|
$nx_mail = false
|
|
|
|
}
|