jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-11-04 04:41:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2024-01-03 12:00

Browse Source
This commit is contained in:
Daniel Berteaud
2024-01-03 12:00:34 +01:00
parent a6b43a8034
commit 9946ec6561
9 changed files with 247 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
roles/lemonldap_ng/templates/nginx_portal.conf.j2
View File

@@ -51,19 +51,19 @@ server {
try_files $uri $uri/ =404;
}
location /index.psgi/adminSessions {
location ~ ^/index.psgi/adminSessions {
deny all;
}
location /index.psgi/sessions {
location ~ ^/index.psgi/sessions {
deny all;
}
location /index.psgi/config {
location ~ ^/index.psgi/config {
deny all;
}
location /index.psgi/notification {
location ~ ^/index.psgi/notification {
deny all;
}
}
@@ -87,7 +87,7 @@ server {
{% endif %}
{% endif %}
location ~ /index.psgi/(adminSessions|sessions|config|notification) {
location ~ ^/index.psgi/config {
{% if llng_engine == 'fastcgi' %}
include /etc/nginx/fastcgi_params;
fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
@@ -107,12 +107,39 @@ server {
{% endfor %}
deny all;
{% if llng_api_pass is defined %}
auth_basic "Lemonldap::NG SOAP endpoint";
auth_basic "Lemonldap::NG API";
auth_basic_user_file /etc/lemonldap-ng/api.htpasswd;
satisfy all;
{% endif %}
}
location ~ ^/index.psgi/(adminSessions|sessions) {
{% if llng_engine == 'fastcgi' %}
include /etc/nginx/fastcgi_params;
fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
fastcgi_param LLTYPE psgi;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_split_path_info ^(.*\.psgi)(/.*)$;
fastcgi_param PATH_INFO $fastcgi_path_info;
{% elif llng_engine == 'uwsgi' %}
include /etc/nginx/uwsgi_params;
uwsgi_pass unix:/run/llng-uwsgi/llng-uwsgi.sock;
uwsgi_param LLTYPE psgi;
uwsgi_param SCRIPT_FILENAME $document_root$sc;
uwsgi_param SCRIPT_NAME $sc;
{% endif %}
{% for ip in llng_api_src_ip %}
allow {{ ip }};
{% endfor %}
deny all;
{% if llng_api_pass is defined %}
auth_basic "Lemonldap::NG API";
auth_basic_user_file /etc/lemonldap-ng/api.htpasswd;
satisfy all;
access_log off;
{% endif %}
}
location / {
deny all;
}