foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert "nginx: Fix crash on el9 with plain text http"

Browse source 
This reverts commit da371980aa.
This commit is contained in:
Timo Makinen 2024-05-11 19:00:51 +00:00
parent e20873cbd3
commit a25cd83e94
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
roles/nginx/templates/nginx.conf.j2
View file

@ -10,6 +10,13 @@ events {
http {
access_log {{ nginx_logdir }}/access.log combined;
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_server_name on;
proxy_ssl_verify on;
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
@ -35,13 +42,6 @@ http {
}
}
{% else %}
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_server_name on;
proxy_ssl_verify on;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;