feat: ipv6 support in ooni-backendproxy

ooni · Jun 5, 2024 · 62cd820 · 62cd820
1 parent c50520d
commit 62cd820
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/tf/modules/ooni_backendproxy/main.tf b/tf/modules/ooni_backendproxy/main.tf
@@ -23,7 +23,7 @@ resource "aws_security_group" "nginx_sg" {
     to_port     = 22
     cidr_blocks = ["0.0.0.0/0"]
   }
-
+  
   egress {
     from_port = 0
     to_port   = 0
@@ -33,6 +33,13 @@ resource "aws_security_group" "nginx_sg" {
       "0.0.0.0/0",
     ]
   }
+
+  egress {
+    from_port        = 0
+    to_port          = 0
+    protocol         = "-1"
+    ipv6_cidr_blocks = ["::/0"]
+  }
 
   lifecycle {
     create_before_destroy = true

diff --git a/tf/modules/ooni_backendproxy/templates/setup-backend-proxy.sh b/tf/modules/ooni_backendproxy/templates/setup-backend-proxy.sh
@@ -16,6 +16,8 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Host \$host;
     }
+
+    error_log /var/log/nginx/error.log;
 }
 EOF
 sudo mv $tmpfile /etc/nginx/sites-available/default