foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nginx/server: Verify backend cert when proxying web sites

Browse source
This commit is contained in:
Timo Makinen 2021-03-22 19:02:10 +00:00
parent fbb64c4fb0
commit aed88b417b
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/nginx/server/templates/nginx.conf.j2
View file

@ -24,6 +24,8 @@ http {
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt; proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key; proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt;
proxy_ssl_verify on;
server { server {
listen 443 ssl http2; listen 443 ssl http2;