From 32086f62131e1b813e2f3d97bc2c78f66c6a3154 Mon Sep 17 00:00:00 2001 From: Carlos Konstanski Date: Wed, 13 Dec 2017 18:54:21 -0700 Subject: adding files --- templates/01_openbook.conf | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 templates/01_openbook.conf (limited to 'templates/01_openbook.conf') diff --git a/templates/01_openbook.conf b/templates/01_openbook.conf new file mode 100644 index 0000000..441f67a --- /dev/null +++ b/templates/01_openbook.conf @@ -0,0 +1,33 @@ +{% set hostname = ansible_nodename + '.' + fqdn %} +{% set ssl_ca = '' %} +{% set ssl_cert_hostname = 'SSLCertificateFile "/etc/ssl/certs/' + hostname + '.crt"' %} +{% set ssl_key_hostname = 'SSLCertificateKeyFile "/etc/ssl/private/' + hostname + '.key"' %} + + + Header edit Location ^http://(.*)\$ https://\$1 + ServerName {{ hostname }} + ServerAdmin carlos.konstanski@verizonwireless.com + ProxyPreserveHost On + ProxyPass /Openbook http://127.0.0.1:8080/Openbook + ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook + RedirectMatch "^/$" "/Openbook" + + + + Header edit Location ^http://(.*)\$ https://\$1 + ServerName {{ hostname }} + ServerAdmin carlos.konstanski@verizonwireless.com + SSLEngine on + {{ ssl_ca }} + {{ ssl_cert_hostname }} + {{ ssl_key_hostname }} + SSLOptions StrictRequire + SSLProtocol TLSv1 TLSv1.1 TLSv1.2 + SSLCipherSuite AES128+EECDH:AES128+EDH + SSLHonorCipherOrder on + SSLCompression off + ProxyPreserveHost On + ProxyPass /Openbook http://127.0.0.1:8080/Openbook + ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook + RedirectMatch "^/$" "/Openbook" + -- cgit v1.3