Toggle navigation
Toggle navigation
This project
Loading...
Sign in
ops
/
yoho-ansible-roles
·
Commits
Go to a project
GitLab
Go to group
Project
Activity
Files
Commits
Pipelines
0
Builds
0
Graphs
Milestones
Issues
0
Merge Requests
0
Members
Labels
Wiki
Forks
Network
Create a new issue
Download as
Email Patches
Plain Diff
Browse Files
Authored by
chunhua.zhang
5 years ago
Commit
4efb09d075c9000882b94067362546a65d2e8d4e
1 parent
23855f84
add comments for wechat cert sync
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
with
5 additions
and
2 deletions
playbooks/wechat.cert.sync.yml
readme.md
roles/openresty/files/java-nginx-config/nginx/conf/lua/limit_api_flow.lua
playbooks/wechat.cert.sync.yml
View file @
4efb09d
---
# switch java inner upstream to aws
# sync wechat cert.
# local cert dir: ~/.cert/wechatpay
-
hosts
:
java-order, java-ufo-fore, java-extendstore
...
...
readme.md
View file @
4efb09d
...
...
@@ -51,6 +51,8 @@ git push
|yoho.dns.mysql_read_to_master| MySQL数据库读切换到主库。Note: 切换后需要reload cobar|
|java-rsyslog| 同步java服务的rsyslog客户端配置|
|java.inner.switch| 修改
`api.yoho.cn` 流量部分到`aws`
|
|wechat.cert.sync| 同步微信支付证书|
## `hashicorp vault` 配置
> Why: credentials 信息统一管理
...
...
roles/openresty/files/java-nginx-config/nginx/conf/lua/limit_api_flow.lua
View file @
4efb09d
...
...
@@ -157,7 +157,7 @@ function forbid_ua()
local
ua
=
http_request
.
get_ua
()
for
i
=
1
,
#
forbid_ua_table
do
if
ua
and
string.find
(
ua
,
forbid_ua_table
[
i
])
then
ngx
.
log
(
ngx
.
ERR
,
"[User-Agent Not Allowed]"
,
ua
)
ngx
.
log
(
ngx
.
ERR
,
"[User-Agent Not Allowed]
:
"
,
ua
)
ngx
.
exit
(
ngx
.
HTTP_OK
)
end
end
...
...
Please
register
or
login
to post a comment