summaryrefslogtreecommitdiff
path: root/puppet/modules/site_nickserver/templates/nickserver-proxy.conf.erb
blob: d4e734c34f1d5acca8459eff526061b2d6d6c604 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
#
# Apache reverse proxy configuration for the Nickserver
#

Listen 0.0.0.0:<%= @nickserver_port -%>

<VirtualHost *:<%= @nickserver_port -%>>
  ServerName <%= @nickserver_domain %>
  ServerAlias <%= @address_domain %>

  SSLCACertificatePath /etc/ssl/certs
  SSLCertificateChainFile <%= scope.lookupvar('x509::variables::local_CAs') %>/<%= scope.lookupvar('site_config::params::ca_name') %>.crt
  SSLCertificateKeyFile <%= scope.lookupvar('x509::variables::keys') %>/<%= scope.lookupvar('site_config::params::cert_name') %>.key
  SSLCertificateFile <%= scope.lookupvar('x509::variables::certs') %>/<%= scope.lookupvar('site_config::params::cert_name') %>.crt

  Include include.d/ssl_common.inc
  
  ProxyPass / http://localhost:<%= @nickserver_local_port %>/
  ProxyPreserveHost On  # preserve Host header in HTTP request
</VirtualHost>