Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Unify all ssl cipher suite configurations

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-08-30 19:36:53 +00:00
parent 215c38198e
commit f1dd7a7432
34 changed files with 69 additions and 64 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/graphite/grafana/templates/grafana.conf
View file

@ -19,8 +19,8 @@
SSLCertificateKeyFile /etc/letsencrypt/live/grafana.cloud.fedoraproject.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/grafana.cloud.fedoraproject.org/fullchain.pem
SSLHonorCipherOrder On
SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL
SSLProtocol ALL -SSLv2
SSLCipherSuite {{ ssl_ciphers }}
SSLProtocol {{ ssl_protocols }}
ProxyPass / http://localhost:3000/
ProxyPassReverse / http://localhost:3000/

4
roles/graphite/graphite/templates/graphite-web.conf
View file

@ -37,8 +37,8 @@
SSLCertificateKeyFile /etc/letsencrypt/live/graphite.cloud.fedoraproject.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/graphite.cloud.fedoraproject.org/fullchain.pem
SSLHonorCipherOrder On
SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL
SSLProtocol ALL -SSLv2
SSLCipherSuite {{ ssl_ciphers }}
SSLProtocol {{ ssl_protocols }}
ProxyPass / http://graphite.cloud.fedoraproject.org/
ProxyPassReverse / http://graphite.cloud.fedoraproject.org/