chore: bump nginx module

Errored hosts (0)

Changed hosts (6)

Unaffected hosts (72)

Changed hosts

diff for biohazard.ocf.berkeley.edu

diff for fallingrocks.ocf.berkeley.edu

```diff ******************************************* File[/etc/nginx/mime.types] => parameters => content => @@ -14,4 +14,5 @@ text/vnd.wap.wml wml; text/x-component htc; + image/avif avif; image/png png; image/tiff tif tiff; @@ -22,5 +23,6 @@ image/svg+xml svg svgz; image/webp webp; - application/font-woff woff; + font/woff woff; + font/woff2 woff2; application/java-archive jar war ear; application/json json; @@ -34,7 +36,12 @@ application/vnd.ms-fontobject eot; application/vnd.ms-powerpoint ppt; + application/vnd.oasis.opendocument.graphics odg; + application/vnd.oasis.opendocument.presentation odp; + application/vnd.oasis.opendocument.spreadsheet ods; + application/vnd.oasis.opendocument.text odt; application/vnd.wap.wmlc wmlc; application/vnd.google-earth.kml+xml kml; application/vnd.google-earth.kmz kmz; + application/wasm wasm; application/x-7z-compressed 7z; application/x-cocoa cco; ******************************************* File[/etc/nginx/nginx.conf] => parameters => content => @@ -38,8 +38,6 @@ _ _ - client_body_temp_path /run/nginx/client_body_temp; client_max_body_size 10m; client_body_buffer_size 128k; - proxy_temp_path /run/nginx/proxy_temp; proxy_connect_timeout 90s; proxy_send_timeout 90s; @@ -50,4 +48,5 @@ proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Proxy ""; ******************************************* - File[/run/nginx/client_body_temp] ******************************************* - File[/run/nginx/proxy_temp] ******************************************* - File[/run/nginx] ******************************************* File[/var/log/nginx] => parameters => replace => + true ******************************************* Nginx::Resource::Location[= /] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[= /] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[= /stub_status] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[_-default] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[apt-default] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[apt.ocf.berkeley.edu-default] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[mirrors.berkeley.edu-default] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[~ /\.(?!well-known).*] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[~ /\.(?!well-known).*] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Location[~ ^/tails] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Server[_] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Server[apt.ocf.berkeley.edu] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Server[apt] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Server[mirrors.berkeley.edu] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Server[mirrors.ocf.berkeley.edu] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* ```

diff for flood.ocf.berkeley.edu

diff for lightning.ocf.berkeley.edu

diff for reaper.ocf.berkeley.edu

diff for tsunami.ocf.berkeley.edu

```diff ******************************************* Concat::Fragment[ssh.ocf.berkeley.edu-800-6666cd76f96956469e7be39d750cc7d9-ssl] => parameters => content => @@ -8,4 +8,5 @@ proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Proxy ""; ******************************************* Concat_fragment[ssh.ocf.berkeley.edu-800-6666cd76f96956469e7be39d750cc7d9-ssl] => parameters => content => @@ -8,4 +8,5 @@ proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Proxy ""; ******************************************* File[/etc/nginx/mime.types] => parameters => content => @@ -14,4 +14,5 @@ text/vnd.wap.wml wml; text/x-component htc; + image/avif avif; image/png png; image/tiff tif tiff; @@ -22,5 +23,6 @@ image/svg+xml svg svgz; image/webp webp; - application/font-woff woff; + font/woff woff; + font/woff2 woff2; application/java-archive jar war ear; application/json json; @@ -34,7 +36,12 @@ application/vnd.ms-fontobject eot; application/vnd.ms-powerpoint ppt; + application/vnd.oasis.opendocument.graphics odg; + application/vnd.oasis.opendocument.presentation odp; + application/vnd.oasis.opendocument.spreadsheet ods; + application/vnd.oasis.opendocument.text odt; application/vnd.wap.wmlc wmlc; application/vnd.google-earth.kml+xml kml; application/vnd.google-earth.kmz kmz; + application/wasm wasm; application/x-7z-compressed 7z; application/x-cocoa cco; ******************************************* File[/etc/nginx/nginx.conf] => parameters => content => @@ -39,8 +39,6 @@ _ _ - client_body_temp_path /run/nginx/client_body_temp; client_max_body_size 10m; client_body_buffer_size 128k; - proxy_temp_path /run/nginx/proxy_temp; proxy_connect_timeout 90s; proxy_send_timeout 90s; @@ -51,4 +49,5 @@ proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Proxy ""; ******************************************* - File[/run/nginx/client_body_temp] ******************************************* - File[/run/nginx/proxy_temp] ******************************************* - File[/run/nginx] ******************************************* File[/var/log/nginx] => parameters => replace => + true ******************************************* Nginx::Resource::Location[ssh.ocf.berkeley.edu-default] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* Nginx::Resource::Server[ssh.ocf.berkeley.edu] => parameters => proxy_set_header => - ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Proto $scheme", "Proxy \"\""] + ["Host $host", "X-Real-IP $remote_addr", "X-Forwarded-For $proxy_add_x_forwarded_for", "X-Forwarded-Host $host", "X-Forwarded-Proto $scheme", "Proxy \"\""] ******************************************* ```

Unaffected hosts

``` acid.ocf.berkeley.edu afterhours.ocf.berkeley.edu anthrax.ocf.berkeley.edu arsenic.ocf.berkeley.edu asteroid.ocf.berkeley.edu autocrat.ocf.berkeley.edu avalanche.ocf.berkeley.edu bedbugs.ocf.berkeley.edu bigbang.ocf.berkeley.edu bigrip.ocf.berkeley.edu blackout.ocf.berkeley.edu blight.ocf.berkeley.edu blizzard.ocf.berkeley.edu chaos.ocf.berkeley.edu corruption.ocf.berkeley.edu coup.ocf.berkeley.edu cyanide.ocf.berkeley.edu cyclone.ocf.berkeley.edu dataloss.ocf.berkeley.edu deadlock.ocf.berkeley.edu death.ocf.berkeley.edu dementors.ocf.berkeley.edu democracy.ocf.berkeley.edu destruction.ocf.berkeley.edu drought.ocf.berkeley.edu eruption.ocf.berkeley.edu falsevacuum.ocf.berkeley.edu famine.ocf.berkeley.edu fire.ocf.berkeley.edu firestorm.ocf.berkeley.edu firewhirl.ocf.berkeley.edu fraud.ocf.berkeley.edu fukushima.ocf.berkeley.edu gridlock.ocf.berkeley.edu hailstorm.ocf.berkeley.edu hal.ocf.berkeley.edu headcrash.ocf.berkeley.edu heatwave.ocf.berkeley.edu hellfire.ocf.berkeley.edu hozer-74.ocf.berkeley.edu hurricane.ocf.berkeley.edu invasion.ocf.berkeley.edu jaws.ocf.berkeley.edu lethe.ocf.berkeley.edu lockdown.ocf.berkeley.edu maelstrom.ocf.berkeley.edu meteorstorm.ocf.berkeley.edu mutation.ocf.berkeley.edu nuke.ocf.berkeley.edu outbreak.ocf.berkeley.edu pestilence.ocf.berkeley.edu plague.ocf.berkeley.edu pox.ocf.berkeley.edu quarantine.ocf.berkeley.edu riptide.ocf.berkeley.edu scurvy.ocf.berkeley.edu segfault.ocf.berkeley.edu shipwreck.ocf.berkeley.edu sinkhole.ocf.berkeley.edu solarflare.ocf.berkeley.edu supernova.ocf.berkeley.edu surge.ocf.berkeley.edu thunder.ocf.berkeley.edu tornado.ocf.berkeley.edu typhoon.ocf.berkeley.edu vampires.ocf.berkeley.edu venom.ocf.berkeley.edu volcano.ocf.berkeley.edu war.ocf.berkeley.edu wildfire.ocf.berkeley.edu windshear.ocf.berkeley.edu worm.ocf.berkeley.edu ```

Jenkins

ocf / puppet