viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

enable real ip on ingress nginx to track cf ips [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-01-16 22:09:27 +00:00
parent bf5c1b9774
commit d1e0e2c5c7
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/kubernetes/nginx-ingress/main.tf
View file

@ -310,7 +310,10 @@ resource "kubernetes_config_map" "ingress_nginx_controller" {
} }
} }
data = { data = {
allow-snippet-annotations = true use-forwarded-headers = "true"
compute-full-forwarded-for = "true"
enable-real-ip = "true"
allow-snippet-annotations = true
# limit-req-status-code = 429 # limit-req-status-code = 429
# limit-conn-status-code = 429 # limit-conn-status-code = 429
enable-modsecurity = true enable-modsecurity = true