infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

The RabbitMQ ansible modules can't use https yet.

Browse source 
Disable SSL on the management api, and mitigate the security risk by
only listening on localhost.
This commit is contained in:
Aurélien Bompard 2018-10-05 09:40:57 +00:00
parent 8dad9ed1de
commit e90ec28ebe
1 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/rabbitmq_cluster/templates/rabbitmq.config
View file

@ -31,10 +31,13 @@
{rabbitmq_management,
[
{listener, [{port, 15672},
{ssl, true},
{ssl_opts, [{cacertfile, "/etc/rabbitmq/ca.crt"},
{certfile, "/etc/rabbitmq/nodecert/node.crt"},
{keyfile, "/etc/rabbitmq/nodecert/node.key"}]}]}
{ip, "127.0.0.1"}
# Ansible can't use HTTPS yet
#{ssl, true},
#{ssl_opts, [{cacertfile, "/etc/rabbitmq/ca.crt"},
# {certfile, "/etc/rabbitmq/nodecert/node.crt"},
# {keyfile, "/etc/rabbitmq/nodecert/node.key"}]}
]}
]},
{rabbitmq_management_agent,