From 77a184b054259a843a4cfeffd535027f8398214f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Krist=C3=B3f=20Torma?= Date: Sun, 5 Mar 2023 23:10:44 +0100 Subject: [PATCH] maybe this --- roles/webgateway/templates/nginx.conf | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/roles/webgateway/templates/nginx.conf b/roles/webgateway/templates/nginx.conf index 2849714..590a38c 100644 --- a/roles/webgateway/templates/nginx.conf +++ b/roles/webgateway/templates/nginx.conf @@ -1,4 +1,4 @@ -# {{ansible_managed}} +# {{ ansible_managed }} user www-data; worker_processes auto; pid /run/nginx.pid; @@ -71,7 +71,7 @@ http { listen 443 ssl http2; listen [::]:443 ssl http2; server_name {{ proxysite.domain }}; - proxy_ssl_name {{ proxysite.domain}}; + proxy_ssl_name {{ proxysite.domain }}; ssl_certificate /etc/letsencrypt/live/{{ proxysite.domain }}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/{{ proxysite.domain }}/privkey.pem; ssl_stapling on; @@ -79,16 +79,16 @@ http { {%- if proxysite.bigrequests %} client_max_body_size 8G; {%- endif %} + {-% if proxysite.ignorecert %} + proxy_ssl_verify off; + {%- endif %} location /{ proxy_pass https://{{ proxysite.ip }}; - {-% if proxysite.ignorecert %} - proxy_ssl_verify off; - {%- endif %} } location /metrics{ proxy_pass https://{{ proxysite.ip }}; - allow 192.168.69.0/24; - deny all; + allow 192.168.69.0/24; + deny all; } }