Re: Enable proxy_protocol on https

2019-06-21 Thread basti
Hello Maxim, thanks a lot, the proxy send the header only on http, my mistake sorry. On 21.06.19 16:05, Maxim Dounin wrote: > Hello! > > On Fri, Jun 21, 2019 at 03:46:53PM +0200, basti wrote: > >> I have nginx 1.14.2 on debian buster and need to enable proxy_protocol. >> (https://docs.nginx.com

Re: Enable proxy_protocol on https

2019-06-21 Thread Maxim Dounin
Hello! On Fri, Jun 21, 2019 at 03:46:53PM +0200, basti wrote: > I have nginx 1.14.2 on debian buster and need to enable proxy_protocol. > (https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/#listen) > > When I enable it on http all is fine. When i try to enable it on htt

Enable proxy_protocol on https

2019-06-21 Thread basti
Hello, I have nginx 1.14.2 on debian buster and need to enable proxy_protocol. (https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/#listen) When I enable it on http all is fine. When i try to enable it on https no connection can be established. No syntax error and no log

Re: Cannot strip QS in rewrite

2019-06-21 Thread aquilinux
Hi Maxim, thanks for the rewrite_log hint. Actually it does rewrite as expected: 2019/06/21 12:35:37 [notice] 7495#7495: *4693835 "(?i)^/ambassadors$" > matches "/ambassadors", client: 1.1.1.1, server: www.example.co.uk, > request: "GET /ambassadors?test=1 HTTP/1.1", host: "www.example.co.uk" > 20

Re: Using GeoIP2

2019-06-21 Thread Francis Daly
On Wed, Jun 19, 2019 at 08:05:13PM -0500, Peter Fraser wrote: Hi there, > geoip2 /usr/local/etc/nginx/GeoIP2/GeoIP2-Country.mmdb { > auto_reload 5m; > $geoip2_metadata_country_build metadata build_epoch; > $geoip2_data_country_code default=US source=$variable_with_ip

Re: limit_except - require trusted ip AND auth vs. ip OR auth

2019-06-21 Thread Matthias Müller
Hi Maxim, works like a charm! Thanks, Matthias Am Mittwoch, den 19.06.2019, 15:33 +0300 schrieb Maxim Dounin: > Hello! > > On Tue, Jun 18, 2019 at 04:41:51PM +0200, Matthias Müller wrote: > > > I would like to constrain HTTP access (PUT, POST) to an NGINX > > server > > for specific locations.