b386dbd631
The Apache 3081 proxy allows us to do layer 7 filtering on incoming requests. However, it was returning 502 errors because it proxies to https://localhost and the certificate doesn't match (see SSLProxyCheckPeerName directive). However, we can't use the full hostname in the gate because our self-signed certificate doesn't cover that. Add a variable and proxy to localhost in the gate, and the full hostname in production. This avoids us having to turn off SSLProxyCheckPeerName. Change-Id: Ie12178a692f81781b848beb231f9035ececa3fd8
4 lines
103 B
YAML
4 lines
103 B
YAML
gitea_no_log: true
|
|
gitea_reverse_proxy: false
|
|
gitea_reverse_proxy_hostname: '{{ inventory_hostname }}'
|