OPSEXP-2354 Fix nginx redirect when behind ELB via argument

roles/nginx/defaults/main.yml

@@ -11,3 +11,4 @@ setup_vhosts: true
 
 # Disable when nginx node is behind another reverse proxy (e.g. AWS ELB)
 nginx_set_proxy_headers: true
+nginx_absolute_redirect: true

roles/nginx/meta/argument_specs.yml

@@ -10,3 +10,11 @@ argument_specs:
         description: If the nginx reverse proxy vhosts should be enabled
         type: bool
         default: true
+      nginx_set_proxy_headers:
+        description: Useful when nginx node is behind another reverse proxy (e.g. should be disabled when behind an AWS ELB)
+        type: bool
+        default: true
+      nginx_absolute_redirect:
+        description: Useful when nginx node is behind another reverse proxy (e.g. should be disabled when behind an AWS ELB)
+        type: bool
+        default: true

roles/nginx/templates/alfresco_proxy.include.j2

@@ -1,5 +1,7 @@
     client_max_body_size 0;
 
+    absolute_redirect {{ 'on' if nginx_absolute_redirect else 'off' }};
+
     set  $allowOriginSite *;
     proxy_pass_request_headers on;
     proxy_pass_header Set-Cookie;

roles/nginx/templates/alfresco_redirect.conf.j2

@@ -1,7 +1,7 @@
 map $remote_addr $rogue_repo_clients {
-    default		1;
-    ::1			0;
-    127.0.0.1		0;
+    default     1;
+    ::1         0;
+    127.0.0.1   0;
 {% for trusted_repo_client in (repo_hosts | map(attribute='local_addr') + [ solr_host, sync_host ]) | unique | reject('equalto', '127.0.0.1') %}
     {{ trusted_repo_client }}	0;
 {% endfor %}