ansible_roles/zen_rev_proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0.1.46-DEV-20210712-130208

Browse Source 
--------------------------
    * MODIFY:
      - updated references for renewed certs
      - re-ordered 2 entries in proxy_sites.yml

    * ADD:
      - add vars for the chris-hammer.com and christian-hammer.com certs
This commit is contained in:
Chris Hammer 2021-07-12 13:03:36 -04:00
parent 6bae34fea3
commit 42eeb2ea30
2 changed files with 23 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
defaults/main/proxy_site_defs.yml
View File

@ -33,11 +33,15 @@
- "54.94.142.218" - "54.94.142.218"
proxy_site_ssl_directory : /etc/nginx/ssl proxy_site_ssl_directory : /etc/nginx/ssl
proxy_site_ssl_certificate : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain12.pem" proxy_site_ssl_certificate : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain13.pem"
proxy_site_ssl_certificate_key : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey12.pem" proxy_site_ssl_certificate_key : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey13.pem"
proxy_site_ssl_protocols : TLSv1.2 proxy_site_ssl_certificate_ch : "{{ proxy_site_ssl_directory }}/chris-hammer.com/fullchain3.pem"
proxy_site_ssl_ciphers : ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256 proxy_site_ssl_certificate_key_ch : "{{ proxy_site_ssl_directory }}/chris-hammer.com/privkey3.pem"
proxy_site_ssl_certificate_cht : "{{ proxy_site_ssl_directory }}/christian-hammer.com/fullchain12.pem"
proxy_site_ssl_certificate_key_cht : "{{ proxy_site_ssl_directory }}/christian-hammer.com/privkey12.pem"
proxy_site_ssl_protocols : TLSv1.2
proxy_site_ssl_ciphers : ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256
# many websites are run from an apache host # many websites are run from an apache host

25
defaults/main/proxy_sites.yml
View File

@ -196,8 +196,17 @@ proxy_sites:
proto : http proto : http
dest : "{{ proxy_default_host }}" dest : "{{ proxy_default_host }}"
port : 80 port : 80
ssl_cert : "{{ proxy_site_ssl_directory }}/chris-hammer.com/fullchain2.pem" ssl_cert : "{{ proxy_site_ssl_certificate_ch }}"
ssl_key : "{{ proxy_site_ssl_directory }}/chris-hammer.com/privkey2.pem" ssl_key : "{{ proxy_site_ssl_certificate_key_ch }}"
max_upload : "{{ proxy_default_max_upload }}"
chris-hammer.com:
proto : http
dest : "{{ proxy_default_host }}"
port : 80
ssl_cert : "{{ proxy_site_ssl_certificate_ch }}"
ssl_key : "{{ proxy_site_ssl_certificate_key_ch }}"
max_upload : "{{ proxy_default_max_upload }}" max_upload : "{{ proxy_default_max_upload }}"
@ -206,15 +215,9 @@ proxy_sites:
proto : http proto : http
dest : "{{ proxy_default_host }}" dest : "{{ proxy_default_host }}"
port : 80 port : 80
ssl_cert : "{{ proxy_site_ssl_directory }}/christian-hammer.com/fullchain11.pem" ssl_cert : "{{ proxy_site_ssl_certificate_cht }}"
ssl_key : "{{ proxy_site_ssl_directory }}/christian-hammer.com/privkey11.pem" ssl_key : "{{ proxy_site_ssl_certificate_key_cht }}"
max_upload : "{{ proxy_default_max_upload }}" max_upload : "{{ proxy_default_max_upload }}"
chris-hammer.com: ...
proto : http
dest : "{{ proxy_default_host }}"
port : 80
ssl_cert : "{{ proxy_site_ssl_directory }}/chris-hammer.com/fullchain2.pem"
ssl_key : "{{ proxy_site_ssl_directory }}/chris-hammer.com/privkey2.pem"
max_upload : "{{ proxy_default_max_upload }}"