summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2010-02-17 20:56:06 -0200
committerSilvio Rhatto <rhatto@riseup.net>2010-02-17 20:56:06 -0200
commite41881ddf7ebe2b7c90ea532624d4e169c797f5b (patch)
tree3b20260d589e81f601f4754b17a6921b0ced79ce
parentd2f2c4f3a8d2cb114f55a4a27c535a1e08aecd4c (diff)
downloadpuppet-nginx-e41881ddf7ebe2b7c90ea532624d4e169c797f5b.tar.gz
puppet-nginx-e41881ddf7ebe2b7c90ea532624d4e169c797f5b.tar.bz2
Increasing proxy buffer for puppetmaster
-rw-r--r--templates/puppetmaster.erb48
1 files changed, 30 insertions, 18 deletions
diff --git a/templates/puppetmaster.erb b/templates/puppetmaster.erb
index b2498b9..3428744 100644
--- a/templates/puppetmaster.erb
+++ b/templates/puppetmaster.erb
@@ -18,15 +18,21 @@ server {
# $ssl_protocol returns the protocol of established SSL-connection
location / {
- proxy_pass http://puppet-production;
- proxy_redirect off;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Client-Verify SUCCESS;
- proxy_set_header X-SSL-Subject $ssl_client_s_dn;
- proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
- proxy_read_timeout 65;
+ proxy_pass http://puppet-production;
+ proxy_redirect off;
+ proxy_set_header Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Client-Verify SUCCESS;
+ proxy_set_header X-SSL-Subject $ssl_client_s_dn;
+ proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
+ proxy_connect_timeout 90;
+ proxy_send_timeout 180;
+ proxy_read_timeout 180;
+ proxy_buffer_size 16k;
+ proxy_buffers 8 16k;
+ proxy_busy_buffers_size 32k;
+ proxy_intercept_errors on;
}
}
@@ -38,14 +44,20 @@ server {
rewrite_log on;
location / {
- proxy_pass http://puppet-production;
- proxy_redirect off;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Client-Verify FAILURE;
- proxy_set_header X-SSL-Subject $ssl_client_s_dn;
- proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
- proxy_read_timeout 65;
+ proxy_pass http://puppet-production;
+ proxy_redirect off;
+ proxy_set_header Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ proxy_set_header X-Client-Verify FAILURE;
+ proxy_set_header X-SSL-Subject $ssl_client_s_dn;
+ proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
+ proxy_connect_timeout 90;
+ proxy_send_timeout 180;
+ proxy_read_timeout 180;
+ proxy_buffer_size 16k;
+ proxy_buffers 8 16k;
+ proxy_busy_buffers_size 32k;
+ proxy_intercept_errors on;
}
}