# This configuration file was auto-generated by the Puppet configuration
# management system.  Any changes you make to this file will be overwritten
# the next time Puppet runs.  Please make configuration changes to this
# service in Puppet.

ssl                     on;
ssl_certificate         /var/lib/puppetmaster/ssl/certs/<%= puppetmaster_certname %>.pem;
ssl_certificate_key     /var/lib/puppetmaster/ssl/private_keys/<%= puppetmaster_certname %>.pem;
ssl_client_certificate  /var/lib/puppetmaster/ssl/certs/ca.pem;
ssl_ciphers             SSLv2:-LOW:-EXPORT:RC4+RSA;
ssl_session_cache       shared:SSL:8m;
ssl_session_timeout     5m;

upstream puppet-production {
  <% puppetmaster_servers.each do |upstream| -%>
    server <%= upstream %>;
  <% end -%>
}