04dad8bf96
Etherpad lite has changed their source tree slightly. This has required a few updates to the etherpad lite puppet module. The custom pad.js needs to go in a different directory and the upstart conf file needs a couple updated paths. In addition to the fixes a couple things have been cleaned up. Now define an etherpadlite.openstack.org node in site.pp and copy SSL certs from /root/secret-files. Change-Id: I312b419aa98212b6db68232c672bc4d75f23777f
30 lines
871 B
Plaintext
30 lines
871 B
Plaintext
server {
|
|
listen 443 <%= default_server %>;
|
|
server_name <%= server_name %>;
|
|
|
|
access_log /var/log/nginx/eplite.access.log;
|
|
error_log /var/log/nginx/eplite.error.log;
|
|
|
|
ssl on;
|
|
ssl_certificate /etc/nginx/ssl/eplite.crt;
|
|
ssl_certificate_key /etc/nginx/ssl/eplite.key;
|
|
|
|
ssl_session_timeout 5m;
|
|
|
|
ssl_protocols SSLv2 SSLv3 TLSv1;
|
|
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
location / {
|
|
proxy_pass http://localhost:9001/;
|
|
proxy_set_header Host $host;
|
|
proxy_buffering off;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 80 <%= default_server %>;
|
|
server_name <%= server_name %>;
|
|
rewrite ^(.*) https://$server_name$1 permanent;
|
|
}
|