From: Tom Hughes <tom@compton.nu>
Date: Sun, 25 Jan 2015 12:35:42 +0000 (+0000)
Subject: Follow X-Forward-For from localhost to see real IP of SSL connections
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/8ad313856c3a38eb173671525166036c86cab760?hp=dbada16b30e7355b5d4ae5ee3ad62bf69904dc92

Follow X-Forward-For from localhost to see real IP of SSL connections
---

diff --git a/cookbooks/squid/templates/default/squid.conf.erb b/cookbooks/squid/templates/default/squid.conf.erb
index 53f84f888..7236a4dd2 100644
--- a/cookbooks/squid/templates/default/squid.conf.erb
+++ b/cookbooks/squid/templates/default/squid.conf.erb
@@ -82,6 +82,7 @@ http_access allow purge purge_hosts
 http_access deny purge
 
 forwarded_for on
+follow_x_forwarded_for allow localhost
 
 #Loggin used for analysis
 logformat zerelog %ts.%03tu %rp "%{Etag}<h" %>a "%{User-Agent}>h" %<st