CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

adjust var name

Browse Source
This commit is contained in:
Jason Ertel
2023-05-08 15:31:08 -04:00
parent 7ac4bc52a3
commit 44344612b7
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/nginx/etc/nginx.conf
View File

@@ -1,5 +1,6 @@
{%- from 'vars/globals.map.jinja' import GLOBALS %} {%- from 'vars/globals.map.jinja' import GLOBALS %}
{%- from 'docker/docker.map.jinja' import DOCKER %} {%- from 'docker/docker.map.jinja' import DOCKER %}
{%- from 'nginx/config.map.jinja' import NGMERGED %}
{%- set role = grains.id.split('_') | last %} {%- set role = grains.id.split('_') | last %}
{%- set influxpass = salt['pillar.get']('secrets:influx_pass') %} {%- set influxpass = salt['pillar.get']('secrets:influx_pass') %}
{%- set influxauth = ('so:' + influxpass) | base64_encode %} {%- set influxauth = ('so:' + influxpass) | base64_encode %}
@@ -33,7 +34,7 @@ http {
include /etc/nginx/mime.types; include /etc/nginx/mime.types;
default_type application/octet-stream; default_type application/octet-stream;
limit_req_zone $binary_remote_addr zone=auth_throttle:10m rate={{ NGMERGED.config.login_throttle_rate }}r/m; limit_req_zone $binary_remote_addr zone=auth_throttle:10m rate={{ NGMERGED.config.throttle_login_rate }}r/m;
include /etc/nginx/conf.d/*.conf; include /etc/nginx/conf.d/*.conf;
@@ -147,7 +148,7 @@ http {
location ~ ^/auth/.*?(login) { location ~ ^/auth/.*?(login) {
rewrite /auth/(.*) /$1 break; rewrite /auth/(.*) /$1 break;
limit_req zone=auth_throttle burst={{ NGMERGED.config.login_throttle_burst }} nodelay; limit_req zone=auth_throttle burst={{ NGMERGED.config.throttle_login_burst }} nodelay;
limit_req_status 429; limit_req_status 429;
proxy_pass http://{{ GLOBALS.manager }}:4433; proxy_pass http://{{ GLOBALS.manager }}:4433;
proxy_read_timeout 90; proxy_read_timeout 90;