From 89eec4e1c5effef676288ff3df9ae7453a8a5682 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Tue, 23 Mar 2021 15:55:01 +0000
Subject: [PATCH] nginx/site: Disable certificate check when we have multiple
 backends

Nginx requires that all backend certificates need to match name defined
in ProxyPass directive:

https://trac.nginx.org/nginx/ticket/1307
---
 roles/nginx/site/templates/site.conf.j2 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/nginx/site/templates/site.conf.j2 b/roles/nginx/site/templates/site.conf.j2
index 62b390d..0d70ce2 100644
--- a/roles/nginx/site/templates/site.conf.j2
+++ b/roles/nginx/site/templates/site.conf.j2
@@ -27,6 +27,8 @@ server {
 {% elif proxy is defined %}
     location / {
 {%  if proxy is not string %}
+        # https://trac.nginx.org/nginx/ticket/1307
+        proxy_ssl_verify off;
         proxy_pass https://upstream_{{ site }};
 {%  else %}
         proxy_pass {{ proxy }};