Only do OCSP stapling on the proxies

The actual cache is only set in the proxy HTTP config.
While we could set the cache path in the other servers' configs as well,
that would be a significantly larger change.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2018-09-25 21:25:00 +02:00
parent a7f503e10a
commit f26ac060cb

View file

@ -57,7 +57,9 @@
{% endif %}
SSLEngine on
SSLUseStapling on
{% if ansible_hostname.startswith('proxy') %}
SSLUseStapling on
{% endif %}
{% if certbot %}
SSLCertificateFile /etc/pki/tls/certs/{{ site_name }}.cert
SSLCertificateKeyFile /etc/pki/tls/private/{{ site_name }}.key