mirror of
https://github.com/jessfraz/dockerfiles.git
synced 2024-11-27 04:16:45 +01:00
update telize
Signed-off-by: Jess Frazelle <acidburn@google.com>
This commit is contained in:
parent
2acc9e3b4e
commit
a22f3334af
|
@ -19,7 +19,7 @@ COPY telize.conf /etc/nginx/conf.d/telize.conf
|
||||||
|
|
||||||
EXPOSE 80 443
|
EXPOSE 80 443
|
||||||
|
|
||||||
ENV TELIZE_VERSION 1.07
|
ENV TELIZE_VERSION master
|
||||||
|
|
||||||
RUN buildDeps=' \
|
RUN buildDeps=' \
|
||||||
curl \
|
curl \
|
||||||
|
@ -29,9 +29,9 @@ RUN buildDeps=' \
|
||||||
&& apt-get update && apt-get install -y $buildDeps --no-install-recommends \
|
&& apt-get update && apt-get install -y $buildDeps --no-install-recommends \
|
||||||
&& rm -rf /var/lib/apt/lists/* \
|
&& rm -rf /var/lib/apt/lists/* \
|
||||||
&& mkdir -p /usr/share/GeoIP \
|
&& mkdir -p /usr/share/GeoIP \
|
||||||
&& curl -sSL https://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz -o /usr/share/GeoIP/GeoIP.dat.gz \
|
&& curl -sSL https://geolite.maxmind.com/download/geoip/database/GeoIPv6.dat.gz -o /usr/share/GeoIP/GeoIPv6.dat.gz \
|
||||||
&& curl -sSL http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz -o /usr/share/GeoIP/GeoLiteCity.dat.gz \
|
&& curl -sSL http://geolite.maxmind.com/download/geoip/database/GeoLiteCityv6-beta/GeoLiteCityv6.dat.gz -o /usr/share/GeoIP/GeoLiteCityv6.dat.gz \
|
||||||
&& curl -sSL http://download.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz -o /usr/share/GeoIP/GeoIPASNum.dat.gz \
|
&& curl -sSL http://download.maxmind.com/download/geoip/database/asnum/GeoIPASNumv6.dat.gz -o /usr/share/GeoIP/GeoIPASNumv6.dat.gz \
|
||||||
&& gunzip /usr/share/GeoIP/*gz \
|
&& gunzip /usr/share/GeoIP/*gz \
|
||||||
&& git clone --depth 1 --branch "${TELIZE_VERSION}" https://github.com/fcambus/telize.git /usr/src/telize \
|
&& git clone --depth 1 --branch "${TELIZE_VERSION}" https://github.com/fcambus/telize.git /usr/src/telize \
|
||||||
&& ( \
|
&& ( \
|
||||||
|
|
|
@ -96,15 +96,15 @@ http {
|
||||||
# GeoIP
|
# GeoIP
|
||||||
##
|
##
|
||||||
|
|
||||||
map_hash_bucket_size 128;
|
map_hash_bucket_size 64;
|
||||||
map_hash_max_size 4096;
|
map_hash_max_size 8192;
|
||||||
|
|
||||||
include /etc/nginx/timezone.conf;
|
include /etc/nginx/timezone.conf;
|
||||||
include /etc/nginx/timezone-offset.conf;
|
include /etc/nginx/timezone-offset.conf;
|
||||||
|
|
||||||
geoip_country /usr/share/GeoIP/GeoIP.dat;
|
geoip_country /usr/share/GeoIP/GeoIPv6.dat;
|
||||||
geoip_city /usr/share/GeoIP/GeoLiteCity.dat;
|
geoip_city /usr/share/GeoIP/GeoLiteCityv6.dat;
|
||||||
geoip_org /usr/share/GeoIP/GeoIPASNum.dat;
|
geoip_org /usr/share/GeoIP/GeoIPASNumv6.dat;
|
||||||
|
|
||||||
# Virtual hosts
|
# Virtual hosts
|
||||||
include /etc/nginx/conf.d/telize.conf;
|
include /etc/nginx/conf.d/telize.conf;
|
||||||
|
|
|
@ -1,13 +1,13 @@
|
||||||
###############################################################################
|
###############################################################################
|
||||||
# #
|
# #
|
||||||
# Telize 1.05 #
|
# Telize 1.07 #
|
||||||
# Copyright (c) 2013-2016, Frederic Cambus #
|
# Copyright (c) 2013-2017, Frederic Cambus #
|
||||||
# http://www.telize.com #
|
# https://www.telize.com #
|
||||||
# #
|
# #
|
||||||
# Created: 2013-08-15 #
|
# Created: 2013-08-15 #
|
||||||
# Last Updated: 2016-01-05 #
|
# Last Updated: 2017-02-07 #
|
||||||
# #
|
# #
|
||||||
# Telize is released under the BSD 3-Clause license. #
|
# Telize is released under the BSD 2-Clause license. #
|
||||||
# See LICENSE file for details. #
|
# See LICENSE file for details. #
|
||||||
# #
|
# #
|
||||||
###############################################################################
|
###############################################################################
|
||||||
|
@ -28,25 +28,22 @@ server {
|
||||||
keepalive_timeout 0;
|
keepalive_timeout 0;
|
||||||
gzip off;
|
gzip off;
|
||||||
|
|
||||||
## Deny illegal Host headers
|
|
||||||
if ($http_referer ~* ^(rwandair.com|m.rwandair.com|stage-rwandair.mobiashara.com)$ ) {
|
|
||||||
return 444;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ /ip$ {
|
location ~ /ip$ {
|
||||||
add_header Cache-Control no-cache;
|
add_header Cache-Control no-cache;
|
||||||
|
|
||||||
charset off;
|
charset off;
|
||||||
default_type text/plain;
|
default_type text/plain;
|
||||||
|
|
||||||
echo $remote_addr;
|
content_by_lua_block {
|
||||||
|
ngx.say(ngx.var.remote_addr)
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
location ~ /jsonip$ {
|
location ~ /jsonip$ {
|
||||||
charset utf-8;
|
charset utf-8;
|
||||||
default_type application/json;
|
default_type application/json;
|
||||||
|
|
||||||
content_by_lua '
|
content_by_lua_block {
|
||||||
local cjson = require("cjson")
|
local cjson = require("cjson")
|
||||||
|
|
||||||
local json = cjson.encode({
|
local json = cjson.encode({
|
||||||
|
@ -59,7 +56,8 @@ server {
|
||||||
ngx.say(callback, "(", json, ");")
|
ngx.say(callback, "(", json, ");")
|
||||||
else
|
else
|
||||||
ngx.say(json)
|
ngx.say(json)
|
||||||
end';
|
end
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
location ~ /geoip/?(?<ip>.*) {
|
location ~ /geoip/?(?<ip>.*) {
|
||||||
|
@ -67,7 +65,8 @@ server {
|
||||||
set $ip $remote_addr;
|
set $ip $remote_addr;
|
||||||
}
|
}
|
||||||
|
|
||||||
# Uncomment when using Telize behind a load balancer, and comment the directive setting X-Real-IP
|
# Uncomment when using Telize behind a load balancer, and
|
||||||
|
# comment the directive setting X-Real-IP
|
||||||
# proxy_set_header X-Forwarded-For $ip;
|
# proxy_set_header X-Forwarded-For $ip;
|
||||||
|
|
||||||
proxy_set_header X-Real-IP $ip;
|
proxy_set_header X-Real-IP $ip;
|
||||||
|
@ -87,17 +86,20 @@ server {
|
||||||
add_header Access-Control-Allow-Origin $cors_origin;
|
add_header Access-Control-Allow-Origin $cors_origin;
|
||||||
}
|
}
|
||||||
|
|
||||||
more_set_headers "Cache-Control: no-cache";
|
content_by_lua_block {
|
||||||
|
|
||||||
content_by_lua '
|
|
||||||
local cjson = require("cjson")
|
local cjson = require("cjson")
|
||||||
local iconv = require("iconv")
|
local iconv = require("iconv")
|
||||||
local cd = iconv.new("utf-8","iso-8859-15")
|
local cd = iconv.new("utf-8","iso-8859-15")
|
||||||
|
|
||||||
|
ngx.header["Cache-Control"] = "no-cache";
|
||||||
|
|
||||||
-- Check for invalid IP addresses
|
-- Check for invalid IP addresses
|
||||||
if ngx.var.remote_addr == "127.0.0.1" then
|
if ngx.var.remote_addr == "127.0.0.1" then
|
||||||
ngx.status = ngx.HTTP_BAD_REQUEST
|
ngx.status = ngx.HTTP_BAD_REQUEST
|
||||||
ngx.say(cjson.encode({code = 401, message = "Input string is not a valid IP address"}))
|
ngx.say(cjson.encode({
|
||||||
|
code = 401,
|
||||||
|
message = "Input string is not a valid IP address"
|
||||||
|
}))
|
||||||
ngx.exit(ngx.HTTP_OK)
|
ngx.exit(ngx.HTTP_OK)
|
||||||
end
|
end
|
||||||
|
|
||||||
|
@ -156,8 +158,7 @@ server {
|
||||||
ngx.say(callback, "(", json, ");")
|
ngx.say(callback, "(", json, ");")
|
||||||
else
|
else
|
||||||
ngx.say(json)
|
ngx.say(json)
|
||||||
end';
|
end
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
# vi: ft=nginx
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user