infra/ansible-role-nginx
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Initial commit

Browse source
This commit is contained in:
nd 2017-10-07 00:11:35 +02:00
commit 06e6de1680
21 changed files with 646 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
templates/dns.conf.j2 Normal file
View file

@ -0,0 +1,4 @@
{% for r in resolver %}
resolver {{ r }};
{% endfor %}
resolver_timeout 5s;

8
templates/ssl_files.j2 Normal file
View file

@ -0,0 +1,8 @@
# certs sent to the client in SERVER HELLO are concatenated in ssl_certificate
ssl_certificate /etc/ssl/{{ inventory_hostname }}.crt;
ssl_certificate_key /etc/ssl/private/{{ inventory_hostname }}.key;
## verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /etc/ssl/{{ inventory_hostname }}.crt;
# Diffie-Hellman parameter for DHE ciphersuites, recommended 2048 bits
ssl_dhparam /etc/ssl/dhparams.pem;