foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nginx: Fix crash on el9 with plain text http

Browse source
This commit is contained in:
Timo Makinen 2024-05-10 16:22:42 +00:00
parent c06d3cdc7e
commit da371980aa
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
roles/nginx/templates/nginx.conf.j2
View file

@ -10,13 +10,6 @@ events {
http { http {
access_log {{ nginx_logdir }}/access.log combined; access_log {{ nginx_logdir }}/access.log combined;
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_server_name on;
proxy_ssl_verify on;
map $http_upgrade $connection_upgrade { map $http_upgrade $connection_upgrade {
default upgrade; default upgrade;
'' close; '' close;
@ -42,6 +35,13 @@ http {
} }
} }
{% else %} {% else %}
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
proxy_ssl_trusted_certificate {{ tls_certs }}/ca.crt;
proxy_ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_server_name on;
proxy_ssl_verify on;
ssl_session_timeout 1d; ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m; ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off; ssl_session_tickets off;