添加action.yoho.cn/admin的IP访问限制

@@ -25,6 +25,21 @@ server {
         proxy_set_header   X-Forwarded-For $http_x_forwarded_for;
         proxy_set_header   Accept-Encoding "gzip"; 
     }
+	
+	location /admin/ {
+	{% for item in yoho_office_ips %}
+	allow {{ item }};
+	{%  endfor %}
+	deny all;
+
+        proxy_redirect off;
+        proxy_pass http://yoho-web-new-inner;
+        proxy_set_header   Host   $host;
+        proxy_set_header   X-Real-IP  $http_x_forwarded_for;
+        proxy_set_header   X-Yoho-Real-IP  $http_x_forwarded_for;
+        proxy_set_header   X-Forwarded-For $http_x_forwarded_for;
+        proxy_set_header   Accept-Encoding "gzip";
+    }
 
 
     location /api/ {
@@ -38,4 +53,4 @@ server {
         proxy_set_header   X-Forwarded-For $http_x_forwarded_for;
         proxy_set_header   Accept-Encoding "gzip"; 
     }
-}
\ No newline at end of file
+}

 ---
 - hosts: web-nginx
   remote_user: root
+  vars_files:
+    - extra_vars/all.yml
   vars_prompt:
     - name: "confirmation"
       prompt: "Sync and reload java nginx. Please Enter [YES] to continue"