use fullchain certificates for nginx

This commit is contained in:
Timo Makinen 2019-05-28 01:10:42 +03:00
parent d036b43244
commit ddb7ddc71b
3 changed files with 4 additions and 18 deletions

View file

@ -28,8 +28,7 @@ http {
listen [::]:443 ssl;
server_name {{ inventory_hostname }};
ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
ssl_trusted_certificate {{ tls_certs }}/ca.crt;
ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}-fullchain.crt;
ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
ssl_client_certificate {{ tls_certs }}/ca.crt;