alanorth/ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/nginx: Re-work vhost template to support HTTPS

Browse Source 
Assumes you have a TLS cert for one domain, but not the others, ie:

    http://blah.com \
    http://blah.net  -> https://blah.io
    http://blah.org /

Otherwise, without https, it creates a vhost with all domain names.

Signed-off-by: Alan Orth <alan.orth@gmail.com>
This commit is contained in:
Alan Orth
2014-09-06 21:32:37 +03:00
parent b6d4f090ec
commit 162197ad25
3 changed files with 41 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
roles/nginx/templates/https.j2 Normal file
View File

@ -0,0 +1,16 @@
{% set tls_cert = item.tls_cert %}
{% set tls_key = item.tls_key %}
ssl_certificate {{ tls_cert }};
ssl_certificate_key {{ tls_key }};
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:1m;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_protocols {{ nginx_tls_protocols }};
ssl_ciphers "{{ tls_cipher_suite }}";
ssl_prefer_server_ciphers on;
# Enable this if you want HSTS (recommended, but be careful)
#add_header Strict-Transport-Security max-age=15768000;