From bdc9ce7696a42e42e779cffe585243870ab092f2 Mon Sep 17 00:00:00 2001
From: Francis Kayiwa <kayiwa@pobox.com>
Date: Thu, 3 Oct 2024 12:26:52 -0400
Subject: [PATCH] add the loadbalancers to real_ip headers

the production and qa servers were populated with the wrong real_ip
this fix adds them to the passenger nginx config

Co-authored-by: Alicia Cozine <acozine@users.noreply.github.com>
Co-authored-by: Christina Chortaria <christinach@users.noreply.github.com>
Co-authored-by: Jane Sandberg <sandbergja@users.noreply.github.com>
Co-authored-by: Kevin Reiss <kevinreiss@users.noreply.github.com>
Co-authored-by: Vickie Karasic <vickiekarasic@users.noreply.github.com>
---
 group_vars/bibdata/production.yml | 4 ++++
 group_vars/bibdata/qa.yml         | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/group_vars/bibdata/production.yml b/group_vars/bibdata/production.yml
index b8140c69d..41ca79e60 100644
--- a/group_vars/bibdata/production.yml
+++ b/group_vars/bibdata/production.yml
@@ -14,6 +14,10 @@ passenger_app_root: "/opt/bibdata/current/public"
 passenger_app_env: "production"
 passenger_extra_config: "{{ lookup('file', 'roles/bibdata/templates/nginx_extra_config')  }}"
 rails_app_name: "bibdata"
+passenger_real_ip_from:
+  - 128.112.203.144
+  - 128.112.203.145
+  - 128.112.203.146
 rails_app_directory: "bibdata"
 rails_app_symlinks: []
 rails_app_env: "production"
diff --git a/group_vars/bibdata/qa.yml b/group_vars/bibdata/qa.yml
index 590adda46..730638f8c 100644
--- a/group_vars/bibdata/qa.yml
+++ b/group_vars/bibdata/qa.yml
@@ -9,6 +9,10 @@ passenger_app_root: "/opt/bibdata/current/public"
 passenger_app_env: "qa"
 passenger_extra_config: "{{ lookup('file', 'roles/bibdata/templates/nginx_extra_config')  }}"
 rails_app_name: "bibdata"
+passenger_real_ip_from:
+  - 128.112.203.144
+  - 128.112.203.145
+  - 128.112.203.146
 rails_app_directory: "bibdata"
 rails_app_symlinks: []
 rails_app_env: "qa"