Only do OCSP stapling on the proxies
The actual cache is only set in the proxy HTTP config. While we could set the cache path in the other servers' configs as well, that would be a significantly larger change. Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
parent
a7f503e10a
commit
f26ac060cb
1 changed files with 3 additions and 1 deletions
|
@ -57,7 +57,9 @@
|
|||
{% endif %}
|
||||
|
||||
SSLEngine on
|
||||
SSLUseStapling on
|
||||
{% if ansible_hostname.startswith('proxy') %}
|
||||
SSLUseStapling on
|
||||
{% endif %}
|
||||
{% if certbot %}
|
||||
SSLCertificateFile /etc/pki/tls/certs/{{ site_name }}.cert
|
||||
SSLCertificateKeyFile /etc/pki/tls/private/{{ site_name }}.key
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue