{% set country = salt['grains.get']('country') %}

nginx:
  ng:
    lookup:
      server_available: /etc/nginx/vhosts.d
      server_enabled: /etc/nginx/vhosts.d
    server:
      config:
        events:
          worker_connections: 1024
          use: epoll
        http:
          gzip: 'on'
          server_tokens: 'off'
          include:
            - mime.types
            - conf.d/*.conf
            - vhosts.d/*.conf
          set_real_ip_from:
            {% if country == 'de' %}
            # HA proxies
            - 192.168.47.4
            - 192.168.47.101
            - 192.168.47.102
            # login proxies
            - 192.168.47.16
            - 192.168.47.21
            - 192.168.47.22
            - 172.16.42.3
            {% elif country == 'us' %}
            - 192.168.67.1
            - 192.168.67.2
            - 192.168.67.3
            {% endif %}
          real_ip_header: X-Forwarded-For
          real_ip_recursive: 'on'
        worker_processes: auto