diff options
| author | Carlos Konstanski <ckonstanski@pippiandcarlos.com> | 2017-12-13 18:54:21 -0700 |
|---|---|---|
| committer | Carlos Konstanski <ckonstanski@pippiandcarlos.com> | 2017-12-13 18:54:21 -0700 |
| commit | 32086f62131e1b813e2f3d97bc2c78f66c6a3154 (patch) | |
| tree | 2005059011aea64121af64de5b3567fd0dcbca3b /templates/01_openbook.conf | |
| parent | 21fa10807bb475bff42a997ac4add3cc7e6346f9 (diff) | |
adding files
Diffstat (limited to 'templates/01_openbook.conf')
| -rw-r--r-- | templates/01_openbook.conf | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/templates/01_openbook.conf b/templates/01_openbook.conf new file mode 100644 index 0000000..441f67a --- /dev/null +++ b/templates/01_openbook.conf @@ -0,0 +1,33 @@ +{% set hostname = ansible_nodename + '.' + fqdn %} +{% set ssl_ca = '' %} +{% set ssl_cert_hostname = 'SSLCertificateFile "/etc/ssl/certs/' + hostname + '.crt"' %} +{% set ssl_key_hostname = 'SSLCertificateKeyFile "/etc/ssl/private/' + hostname + '.key"' %} + +<VirtualHost *:80> + Header edit Location ^http://(.*)\$ https://\$1 + ServerName {{ hostname }} + ServerAdmin carlos.konstanski@verizonwireless.com + ProxyPreserveHost On + ProxyPass /Openbook http://127.0.0.1:8080/Openbook + ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook + RedirectMatch "^/$" "/Openbook" +</VirtualHost> + +<VirtualHost *:443> + Header edit Location ^http://(.*)\$ https://\$1 + ServerName {{ hostname }} + ServerAdmin carlos.konstanski@verizonwireless.com + SSLEngine on + {{ ssl_ca }} + {{ ssl_cert_hostname }} + {{ ssl_key_hostname }} + SSLOptions StrictRequire + SSLProtocol TLSv1 TLSv1.1 TLSv1.2 + SSLCipherSuite AES128+EECDH:AES128+EDH + SSLHonorCipherOrder on + SSLCompression off + ProxyPreserveHost On + ProxyPass /Openbook http://127.0.0.1:8080/Openbook + ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook + RedirectMatch "^/$" "/Openbook" +</VirtualHost> |