From 6422cb7507a757fcedb6673663b73b51748e6211 Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Wed, 18 Mar 2015 09:06:22 +0300
Subject: [PATCH] roles/nginx: Switch nginx OCSP resolver to OpenDNS

We don't need to give Google EVERYTHING.

Signed-off-by: Alan Orth <alan.orth@gmail.com>
---
 roles/nginx/templates/https.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/nginx/templates/https.j2 b/roles/nginx/templates/https.j2
index cbf9769..df0aa13 100644
--- a/roles/nginx/templates/https.j2
+++ b/roles/nginx/templates/https.j2
@@ -19,7 +19,7 @@
     # OCSP stapling...
     ssl_stapling on;
     ssl_stapling_verify on;
-    resolver 8.8.4.4 8.8.8.8;
+    resolver 208.67.222.222 208.67.220.220;
 {% endif %}
 
     # nginx does not auto-rotate session ticket keys: only a HUP / restart will do so and