diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2025-11-15 10:28:34 -0300 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2025-11-15 10:28:34 -0300 |
| commit | cde58597fdd74ce0990cbff4af5e839b9639b5c2 (patch) | |
| tree | 737ee15882dd964012285b2d741ba7a77649d3f3 | |
| parent | b7958c76c28d89e90f38c1d37f8328d3ee9ee8da (diff) | |
| download | puppet-nginx-cde58597fdd74ce0990cbff4af5e839b9639b5c2.tar.gz puppet-nginx-cde58597fdd74ce0990cbff4af5e839b9639b5c2.tar.bz2 | |
Fix: update deprecated SSL config
| -rw-r--r-- | templates/default-ssl.erb | 3 | ||||
| -rw-r--r-- | templates/site-ssl.erb | 3 |
2 files changed, 2 insertions, 4 deletions
diff --git a/templates/default-ssl.erb b/templates/default-ssl.erb index 4413461..e82c367 100644 --- a/templates/default-ssl.erb +++ b/templates/default-ssl.erb @@ -1,7 +1,6 @@ server { - listen 443 default_server; + listen 443 default_server ssl; server_name _; - ssl on; ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem; ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key; return 403; diff --git a/templates/site-ssl.erb b/templates/site-ssl.erb index 11a69dd..ae146bb 100644 --- a/templates/site-ssl.erb +++ b/templates/site-ssl.erb @@ -5,10 +5,9 @@ proxy_cache_path /var/cache/nginx/<%= @name %> levels=<%= @cache_levels %> keys_ limit_req_zone <%= @rate_limit_key %> zone=<%= @rate_limit_zone %>:<%= @rate_limit_size %> rate=<%= @rate_limit_rate %>; <% end -%> server { - listen 443; + listen 443 ssl; server_name <%= @server_name %> <%= @aliases %>; - ssl on; ssl_certificate /etc/letsencrypt/live/<%= @server_name %>/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/<%= @server_name %>/privkey.pem; |