diff --git a/preprod/forward-to-legacy-nginx.yaml b/preprod/forward-to-legacy-nginx.yaml index 4da1e72..a9b3ebf 100644 --- a/preprod/forward-to-legacy-nginx.yaml +++ b/preprod/forward-to-legacy-nginx.yaml @@ -13,10 +13,16 @@ tcp: entryPoints: - "https" + serversTransports: + nginx-legacy-transport-secure: + proxyProtocol: + version: 2 + services: # Service defining the external IP nginx-legacy-service-secure: loadBalancer: + serversTransport: nginx-legacy-transport-secure servers: # This is the actual external IP and Port of your Nginx - address: "webserver:443" diff --git a/prod/forward-to-legacy-nginx.yaml b/prod/forward-to-legacy-nginx.yaml index 4da1e72..a9b3ebf 100644 --- a/prod/forward-to-legacy-nginx.yaml +++ b/prod/forward-to-legacy-nginx.yaml @@ -13,10 +13,16 @@ tcp: entryPoints: - "https" + serversTransports: + nginx-legacy-transport-secure: + proxyProtocol: + version: 2 + services: # Service defining the external IP nginx-legacy-service-secure: loadBalancer: + serversTransport: nginx-legacy-transport-secure servers: # This is the actual external IP and Port of your Nginx - address: "webserver:443" diff --git a/tests/mock_nginx/legacy.conf b/tests/mock_nginx/legacy.conf index 6aee978..bb1e9b6 100644 --- a/tests/mock_nginx/legacy.conf +++ b/tests/mock_nginx/legacy.conf @@ -5,6 +5,9 @@ http { listen 80; server_name _; + real_ip_header X-Forwarded-For; + set_real_ip_from 0.0.0.0/0; + location / { add_header X-Mock-Service "legacy"; return 200 "Mock Nginx Legacy HTTP\n"; @@ -12,9 +15,12 @@ http { } server { - listen 443 ssl; + listen 443 ssl proxy_protocol; server_name _; + real_ip_header proxy_protocol; + set_real_ip_from 0.0.0.0/0; + ssl_certificate /etc/nginx/certs/server.crt; ssl_certificate_key /etc/nginx/certs/server.key;