From a7ef494e3683d06f375b2b5530de97e0a91f2c3c Mon Sep 17 00:00:00 2001 From: Grant Slater Date: Sat, 17 Dec 2016 23:50:21 +0000 Subject: [PATCH] tilecache: do not pass cookie to backend --- .../templates/default/nginx_tile_ssl.conf.erb | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb index f0bfdf209..a22391255 100644 --- a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb +++ b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb @@ -36,6 +36,17 @@ server { proxy_http_version 1.1; proxy_set_header Connection ""; + proxy_connect_timeout 5s; + + # Do not pass cookies to backend. + proxy_set_header Cookie ""; + # Do not pass Accept-Encoding to backend. + proxy_set_header Accept-Encoding ""; + + # Do not allow setting cookies from cached pages. + proxy_ignore_headers Set-Cookie; + proxy_hide_header Set-Cookie; + # Slow traffic slightly limit_rate 24576; } -- 2.39.5