.

salt/states/firewalld/init.sls

@@ -52,6 +52,8 @@ Configure firewalld for internal network:
       - dns
       - ntp
       - registry
+      - nfs
+      - nfs3
 
 Configure firewalld for public networks:
   firewalld.present:

salt/states/rancher/files/rancher-proxy.conf.jinja

@@ -9,9 +9,10 @@ server {
     ssl_certificate     /etc/rancher/ssl/rancher-server.crt;
     ssl_certificate_key /etc/rancher/ssl/rancher-server.key;
     location /{ 
-        proxy_pass https://localhost:9443;
-	proxy_ssl_trusted_certificate /etc/rancher/ssl/rancher-server.crt;
+        proxy_pass https://172.18.0.1:9080;
         proxy_http_version 1.1;
+	proxy_read_timeout 3600;
+        proxy_set_header X-API-request-url $scheme://$host:$server_port$request_uri;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection $connection_upgrade;
         proxy_set_header Host $host;
@@ -19,7 +20,10 @@ server {
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header X-Forwarded-Port $server_port;
-
+        proxy_set_header X-Forwarded-Host $host:$server_port;
+        proxy_set_header Referer $host:$server_port;
+        proxy_buffering off;
+        proxy_redirect off;
     }
 }