Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

use public_hostname because letsencrypt knows it by that name

Browse source
This commit is contained in:
Kevin Fenzi 2018-09-18 19:10:20 +00:00
parent 4252cab795
commit 4458507fc9
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/taskotron/ssl-taskotron/templates/ssl.conf.j2
View file

@ -101,14 +101,14 @@ SSLCipherSuite {{ ssl_ciphers }}
# the certificate is encrypted, then you will be prompted for a
# pass phrase. Note that a kill -HUP will prompt again. A new
# certificate can be generated using the genkey(1) command.
SSLCertificateFile /etc/pki/tls/certs/{{ inventory_hostname }}.crt
SSLCertificateFile /etc/pki/tls/certs/{{ public_hostname }}.crt
# Server Private Key:
# If the key is not combined with the certificate, use this
# directive to point at the key file. Keep in mind that if
# you've both a RSA and a DSA private key you can configure
# both in parallel (to also allow the use of DSA ciphers, etc.)
SSLCertificateKeyFile /etc/pki/tls/private/{{ inventory_hostname }}.key
SSLCertificateKeyFile /etc/pki/tls/private/{{ public_hostname }}.key
# Server Certificate Chain:
# Point SSLCertificateChainFile at a file containing the