Skip to content

Commit

Permalink
testing showed us we needed these fixes
Browse files Browse the repository at this point in the history
Co-authored-by: Jane Sandberg <sandbergja@users.noreply.github.com>
  • Loading branch information
acozine and sandbergja committed Oct 17, 2023
1 parent 305743a commit 80b4544
Show file tree
Hide file tree
Showing 3 changed files with 11 additions and 2 deletions.
1 change: 1 addition & 0 deletions roles/nginxplus/defaults/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -441,3 +441,4 @@ nginx_stream_template:
# increase the size first, when that stops working, increase the number of hash buckets in the table
nginx_server_names_hash_bucket_size: 64
nginx_server_names_hash_max_size: 1024
client_max_body_size: 0
2 changes: 1 addition & 1 deletion roles/nginxplus/templates/http/library.conf.j2
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ server {
ssl_certificate_key /etc/letsencrypt/live/{{ item.name }}/privkey.pem;
ssl_session_cache shared:SSL:1m;
ssl_prefer_server_ciphers on;
client_max_body_size 0;
client_max_body_size {{ client_max_body_size }};

{% if item.visibility == "public" %}
location {{ item.location }} {
Expand Down
10 changes: 9 additions & 1 deletion roles/nginxplus/vars/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,9 @@ sites:
## most sites have app_protect disabled
## set app_protect: enabled to enable it
# app_protect: enabled
## client_max_body_size defines the upper limit on request sizes
## default is 0 (don't check), if you change this, you must include the unit of measurement
# client_max_body_size: 8m
## error handling templates live in /etc/nginx/conf.d/templates/
## the default template for handling errors is errors.conf
# error_handling_template: cdh-errors.conf
Expand Down Expand Up @@ -49,6 +52,8 @@ sites:
short_name: allsearch-api
location: "/"
visibility: public
lbtechnique: least_conn
client_max_body_size 512k
app_protect: disabled
rate_limit: enabled
rate_limit_mb: 10
Expand All @@ -60,7 +65,10 @@ sites:
short_name: allsearch-api-staging
location: "/"
visibility: private
app_protect: disabled
lbtechnique: least_conn
client_max_body_size: 512k
app_protect: enabled

# - name: annotations-prod
# servers:
# - annotations-prod1
Expand Down

0 comments on commit 80b4544

Please sign in to comment.