infra/ansible-role-nginx
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixed vhost config and ssl trusted certs

Browse source
This commit is contained in:
nd 2019-03-30 20:39:16 +01:00
parent 6d75684a40
commit 6d087a3938
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
templates/vhost.j2
View file

@ -38,6 +38,9 @@ server {
proxy_hide_header Server;
proxy_hide_header X-AspNetMvc-Version;
proxy_hide_header X-AspNet-Version;
# no double headers
proxy_hide_header Strict-Transport-Security;
}
{% endif %}
@ -50,7 +53,6 @@ server {
{% if vhost.letsencrypt|d(False) %}
ssl_certificate /etc/ssl/letsencrypt_{{ vhost_name }}_chained.crt;
ssl_certificate_key /etc/ssl/private/letsencrypt_{{ vhost_name }}.key;
ssl_trusted_certificate /etc/ssl/letsencrypt_full_chain.crt;
ssl_stapling_verify on;
ssl_stapling on;
{% endif %}