bkg / puppet-django Goto Github PK

@bkg

Set X-Forwarded- headers on location that serves Django if ssl=true

nginx::resource::location { "name":
    ...
    proxy_set_header => ['X-Forwarded-Proto $scheme',
                         'X-Forwarded-For $proxy_add_x_forwarded_for',
                         'Host $http_host',]
    ...
}

Django relies on the X-Forwarded-Proto or whatever is set in settings.py

SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')

See https://docs.djangoproject.com/en/1.7/ref/settings/ for details.

I added all the headers since there might be something weird going on if you set them on the location and the server at the same time, they might be all required.

Thank you very much,
Falk

According to the Nginx puppet module we need to expose to

ssl
ssl_cert
ssl_key

to the django module in order to install ssl for API authentication.

Thx, Falk

I am using puppet 3.6 and librarian-puppet 0.4 (which has some name spacing changes). Let me know if it works for you after pulling gif-machines and updating librarian puppet.