nginx/server: Verify backend cert when proxying web sites

This commit is contained in:
Timo Makinen 2021-03-22 19:02:10 +00:00
parent fbb64c4fb0
commit aed88b417b

View file

@ -24,6 +24,8 @@ http {
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt;
proxy_ssl_verify on;
server {
listen 443 ssl http2;