foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix nginx/server role for openbsd

Browse source
This commit is contained in:
Timo Makinen 2019-05-27 22:36:35 +03:00
parent a69e66bbac
commit e95bd87ab5
4 changed files with 20 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

17
roles/nginx/server/templates/nginx.conf.j2
View file

@ -1,10 +1,11 @@
{% if ansible_os_family == "RedHat" %}
include /usr/share/nginx/modules/mod-http-xslt-filter.conf;
{% endif %}
user nginx;
user {{ nginx_user }};
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
error_log {{ nginx_logdir }}/error.log;
events {
worker_connections 1024;
@ -14,7 +15,7 @@ http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $host';
access_log /var/log/nginx/access.log main;
access_log {{ nginx_logdir }}/access.log main;
ssl on;
ssl_session_cache builtin:1000 shared:SSL:10m;
@ -27,11 +28,11 @@ http {
listen [::]:443 ssl;
server_name {{ inventory_hostname }};
ssl_certificate /etc/pki/tls/certs/{{ inventory_hostname }}.crt;
ssl_trusted_certificate /etc/pki/tls/certs/ca.crt;
ssl_certificate_key /etc/pki/tls/private/{{ inventory_hostname }}.key;
ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
ssl_trusted_certificate {{ tls_certs }}/ca.crt;
ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
ssl_client_certificate /etc/pki/tls/certs/ca.crt;
ssl_client_certificate {{ tls_certs }}/ca.crt;
ssl_verify_client on;
root /srv/web/{{ inventory_hostname }};