Chris Hammer
358c713dee
-------------------------
* MODIFY:
- modified definition for resources.thezengarden.net; proxy needs to be for http proto
* UPDATE:
- updated ssl certs due to renewal
27 lines
974 B
YAML
27 lines
974 B
YAML
---
|
|
proxy_site_conf_dir : /etc/nginx/conf.d
|
|
proxy_site_file : "{{ proxy_site_conf_dir }}/zen_proxy.conf"
|
|
proxy_site_version : 1.8
|
|
proxy_site_revision : 20191031-132522
|
|
|
|
|
|
proxy_site_log_path : /proxy_logs
|
|
proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log"
|
|
|
|
|
|
proxy_site_ssl_directory : /etc/nginx/ssl
|
|
proxy_site_ssl_certificate : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain5.pem"
|
|
proxy_site_ssl_certificate_key : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey5.pem"
|
|
proxy_site_ssl_protocols : TLSv1.2
|
|
proxy_site_ssl_ciphers : ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256
|
|
|
|
|
|
# many websites are run from our apache host
|
|
# ...lets define it here to make things easier
|
|
proxy_default_host : zg-lxwb04.thezengarden.net
|
|
|
|
|
|
# some of our sites require uploads, and those uploads
|
|
# can be rather large; lets set a default max upload size:
|
|
proxy_default_max_upload: 512M
|