aboutsummaryrefslogtreecommitdiffstats
path: root/web/etc/varnish/nms.vcl
blob: 8ac8b466fa4873e3cb2190f0e880df40e9e10c1f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# vim: ts=8:expandtab:sw=4:softtabstop=4

# Magi.
vcl 4.0;

# Mer magi.
backend default {
    .host = "127.0.0.1";
    .port = "8080";
}
acl yoda {
    "185.110.148.11";
    "127.0.0.1";
    "::1";
    "2a06:5841:1337::11";
}
# Sort magi.
sub vcl_recv {
    if (client.ip !~ yoda) {
        return (synth(418,"GET RECKT"));
    }
    if (req.url ~ "^/where" || req.url ~ "^/location") {
	set req.url = "/api/public/location";
    }
    if (req.method != "GET" &&
        req.method != "HEAD" &&
        req.method != "PUT" &&
        req.method != "POST" &&
        req.method != "TRACE" &&
        req.method != "OPTIONS" &&
        req.method != "DELETE") {
        # Vi hater alt som er gøy.
        return (synth(418,"LOLOLOL"));
    }

    if (req.method != "GET" && req.method != "HEAD") {
        /* We only deal with GET and HEAD by default */
        return (pass);
    }

    # Brukes ikke. Cookies er for nubs.
    unset req.http.Cookie;

    # Tvinges gjennom for å cache med authorization-skrot.
    return (hash);
}


# Rosa magi
sub vcl_hash {
    # Wheee. Legg til authorization-headeren i hashen.
    hash_data(req.http.authorization);
}

# Mauve magi. Hva nå enn det er.
# Dette er WIP - Skal flyttes til backend
sub vcl_backend_response {
    set beresp.http.x-url = bereq.url;
    if (beresp.http.x-ban) {
        ban("obj.http.x-url ~ " + beresp.http.x-ban);
    }
    if (beresp.status != 200) {
        set beresp.uncacheable = false;
        set beresp.ttl = 5s;
    }
}