pmb/masto-ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Better support SSL certinficates in the frontend role

Browse Source
This commit is contained in:
Waffles
2022-12-27 22:09:36 -08:00
parent 8593bf2e7a
commit c537ce7120
10 changed files with 99 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/frontend/templates/files.j2 → roles/frontend/templates/cdn.j2
+2 -2
View File
@@ -22,8 +22,8 @@ server {
include /etc/nginx/cloudflare;
ssl_certificate /etc/letsencrypt/live/{{ ENV_PRODUCTION['S3_ALIAS_HOST'] }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ ENV_PRODUCTION['S3_ALIAS_HOST'] }}/privkey.pem;
ssl_certificate /etc/nginx/ssl/cdn.fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/cdn.privkey.pem;
access_log /var/log/nginx/{{ ENV_PRODUCTION['S3_ALIAS_HOST'] }}.access.log files_cache;
error_log /var/log/nginx/{{ ENV_PRODUCTION['S3_ALIAS_HOST'] }}.error.log;
roles/frontend/templates/mastodon.j2
+2 -2
View File
@@ -36,8 +36,8 @@ server {
ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA; ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_certificate /etc/letsencrypt/live/{{ ENV_PRODUCTION['LOCAL_DOMAIN'] }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ ENV_PRODUCTION['LOCAL_DOMAIN'] }}/privkey.pem;
ssl_certificate /etc/nginx/ssl/domain.fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/domain.privkey.pem;
keepalive_timeout 70;
sendfile on;