b3e2adf3 by Gustavo Calcaterra Committed by DevOps

Configure SSL globally, and use Red Hat repo to install nginx

1 parent e8db918c
......@@ -6,6 +6,9 @@
- name: Install NGINX
ansible.builtin.include_role:
name: nginx
vars:
nginx_manage_repo: false
nginx_install_from: os_repository
- name: Configure NGINX
ansible.builtin.include_role:
......@@ -21,6 +24,16 @@
least_conn: true
servers:
- address: tlbi01.vue.gov.py:80
ssl:
certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem
certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem
prefer_server_ciphers: true
session_cache:
shared:
name: SSL
size: 10m
session_timeout: 10m
ssl_ciphers: PROFILE=SYSTEM
servers:
- core:
listen:
......@@ -47,16 +60,6 @@
- port: 443
ssl: true
server_name: vueapp.test.vue.gov.py
ssl:
certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem
certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem
prefer_server_ciphers: true
session_cache:
shared:
name: SSL
size: 10m
session_timeout: 10m
ssl_ciphers: PROFILE=SYSTEM
log:
access:
- path: /var/log/nginx/access.log
......
Styling with Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!