configure nginx real_ip and allow fcgi_index

Author: Aurelien Bondis

README.md

@@ -75,6 +75,7 @@ The following variables are available to configure the role:
   servers, defaults to ```["unix:/var/run/php-fpm-bkp.sock"]```.
 - **nginx_drupal_language_path_prefixes**: (optional) The list of enabled
   language path prefixes used on the site.
+- **nginx_drupal_set_real_ip_from**: (optional) configure real_ip if necessary
 - **nginx_drupal_x_frame_options**: (optional) Value of the X-Frame-Options
   response header, defaults to `DENY`. If the site uses frames, set to
   `SAMEORIGIN`. `DENY` may conflicts with pseudo streaming (at least with Nginx
@@ -111,6 +112,7 @@ The following variables are available to configure the role:
         - **allowed_ips**: (optional) List of IP (with or without subnet) allowed to visit this location
         - **denied_ips**: (optional)  List of IP (with or without subnet) denied to visit this location
         - **fastcgi_pass**: (optional) fastcgi socket (or IP) to send to. If not specified, will use the @drupal location as upstream.
+        - **fastcgi_index**: (optional) fastcgi index
     - **includes**: (optional) A list of additional Nginx configuration files
       to include for the site.
     - **server_name_in_redirect**: (optional) Enables or disables the use of

templates/nginx.j2

@@ -39,7 +39,11 @@ http {
     ## static file serving.
     sendfile on;
     ## Handling of IPs in proxied and load balancing situations.
+    {% if nginx_drupal_set_real_ip_from is defined %}
+    set_real_ip_from {{ nginx_drupal_set_real_ip_from }};
+    {% else %}
     set_real_ip_from 0.0.0.0/32; # all addresses get a real IP.
+    {% endif %}
     real_ip_header X-Forwarded-For; # the ip is forwarded from the load balancer/proxy
 
     ## Define a zone for limiting the number of simultaneous

templates/sites-available/drupal-site.j2

@@ -96,6 +96,9 @@ server {
     {%- if location.fastcgi_pass is defined -%}
     include fastcgi_params;
         fastcgi_pass {{ location.fastcgi_pass }};
+        {%- if location.fastcgi_index is defined -%}
+        fastcgi_index {{ location.fastcgi_index }};
+        {% endif %}
     {% else %}
     try_files $uri @drupal;
     {% endif %}
@@ -309,6 +312,9 @@ server {
         {% if location.fastcgi_pass is defined %}
             include fastcgi_params;
             fastcgi_pass {{ location.fastcgi_pass }};
+            {%- if location.fastcgi_index is defined -%}
+            fastcgi_index {{ location.fastcgi_index }};
+            {% endif %}
         {% else %}
             try_files $uri @drupal;
         {% endif %}