From ca3270d89be48808def8c3d552d0c429971403c4 Mon Sep 17 00:00:00 2001 From: Timo Makinen Date: Mon, 22 Mar 2021 20:59:03 +0000 Subject: [PATCH] nginx/server: Use SNI when connecting to backend servers --- roles/nginx/server/templates/nginx.conf.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/nginx/server/templates/nginx.conf.j2 b/roles/nginx/server/templates/nginx.conf.j2 index eb98202..b367367 100644 --- a/roles/nginx/server/templates/nginx.conf.j2 +++ b/roles/nginx/server/templates/nginx.conf.j2 @@ -16,6 +16,7 @@ http { proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt; proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key; proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt; + proxy_ssl_server_name on; proxy_ssl_verify on; {% if plaintext is defined %}