b386dbd631
The Apache 3081 proxy allows us to do layer 7 filtering on incoming requests. However, it was returning 502 errors because it proxies to https://localhost and the certificate doesn't match (see SSLProxyCheckPeerName directive). However, we can't use the full hostname in the gate because our self-signed certificate doesn't cover that. Add a variable and proxy to localhost in the gate, and the full hostname in production. This avoids us having to turn off SSLProxyCheckPeerName. Change-Id: Ie12178a692f81781b848beb231f9035ececa3fd8
14 lines
585 B
Django/Jinja
14 lines
585 B
Django/Jinja
gitea_secret_key: zcHsCZsYrOUrQd24nlJS9xRCwek3uzp8X5OFQGJox4jkEbuIyeJoxtv7n00uV6Tp
|
|
gitea_internal_token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE1NTAyNjk3ODV9.QaommLldgEJr9E26VrPp7l7gKo3zpywTM9botpVoyqc
|
|
gitea_lfs_jwt_secret: qzeNfUus9JJ15eJZwpSlU3P5Ca62Oei3NrjVbb97mdI
|
|
gitea_root_db_password: TlG1lNXKLfruXN0j
|
|
gitea_db_username: gitea
|
|
gitea_db_password: 5bfuOBKtltff0XZX
|
|
gitea_root_password: BUbBcpToMwR05ZCB
|
|
gitea_no_log: false
|
|
gitea_gerrit_password: yVpMWIUIvT7f6NwA
|
|
gitea_reverse_proxy: true
|
|
gitea_reverse_proxy_hostname: localhost
|
|
iptables_extra_public_tcp_ports:
|
|
- 3081
|