diff options
author | elijah <elijah@riseup.net> | 2013-05-21 13:17:25 -0700 |
---|---|---|
committer | elijah <elijah@riseup.net> | 2013-05-21 13:17:25 -0700 |
commit | aafeaecb26fbb05284558114332a89439261637b (patch) | |
tree | 09ab1eedfb9c4f64e7c183737d58dc71baad25ee /puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb | |
parent | c591f65a555a20bd6bc3a2171cffb55283dd9d0c (diff) |
nickserver - added support for apache reverse proxy frontend to handle the TLS.
Diffstat (limited to 'puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb')
-rw-r--r-- | puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb b/puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb new file mode 100644 index 00000000..67896cd3 --- /dev/null +++ b/puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb @@ -0,0 +1,23 @@ +# +# Apache reverse proxy configuration for the Nickserver +# + +Listen 0.0.0.0:<%= @nickserver_port -%> + +<VirtualHost *:<%= @nickserver_port -%>> + ServerName <%= @nickserver_domain %> + ServerAlias <%= @address_domain %> + + SSLEngine on + SSLProtocol -all +SSLv3 +TLSv1 + SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH + SSLHonorCipherOrder on + + SSLCACertificatePath /etc/ssl/certs + SSLCertificateChainFile /etc/ssl/certs/nickserver.pem + SSLCertificateKeyFile /etc/x509/keys/nickserver.key + SSLCertificateFile /etc/x509/certs/nickserver.crt + + ProxyPass / http://localhost:<%= @nickserver_local_port %>/ + ProxyPreserveHost On # preserve Host header in HTTP request +</VirtualHost> |