aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

Remove old ACME challenge

Browse source
This commit is contained in:
Alexandre Iooss 2019-02-06 21:32:14 +01:00
parent c9f10b01df
commit 234c3556c6
1 changed files with 3 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
roles/nginx-reverse-proxy/templates/nginx-sites-available.j2
View file

@ -5,12 +5,6 @@ server {
location / { location / {
return 302 https://$host$request_uri; return 302 https://$host$request_uri;
} }
# On redirige tout ce qui concerne le challenge letsencrypt vers le meme dossier
# pour pouvoir utiliser le plugin webroot de letsencrypt
location /.well-known/acme-challenge {
alias /usr/share/nginx/html/.well-known/acme-challenge;
}
} }
server { server {
@ -22,9 +16,9 @@ server {
error_log /var/log/nginx/{{ item.name }}.error.log; error_log /var/log/nginx/{{ item.name }}.error.log;
# Use LetsEncrypt SSL # Use LetsEncrypt SSL
ssl_certificate /etc/letsencrypt/live/auro.re/fullchain.pem; ssl_certificate /etc/letsencrypt/live/auro.re-0001/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/auro.re/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/auro.re-0001/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/auro.re/chain.pem; ssl_trusted_certificate /etc/letsencrypt/live/auro.re-0001/chain.pem;
location / { location / {
proxy_redirect off; proxy_redirect off;
@ -36,11 +30,5 @@ server {
# "A man is not dead while his name is still spoken." -- Going Postal # "A man is not dead while his name is still spoken." -- Going Postal
add_header X-Clacks-Overhead "GNU Terry Pratchett"; add_header X-Clacks-Overhead "GNU Terry Pratchett";
} }
# On redirige tout ce qui concerne le challenge letsencrypt vers le meme dossier
# pour pouvoir utiliser le plugin webroot de letsencrypt
location /.well-known/acme-challenge {
alias /usr/share/nginx/html/.well-known/acme-challenge;
}
} }