diff options
| author | Pedro Alvarez <pedro.alvarez@codethink.co.uk> | 2021-08-18 13:16:09 +0200 |
|---|---|---|
| committer | Pedro Alvarez <pedro.alvarez@codethink.co.uk> | 2021-08-18 13:16:09 +0200 |
| commit | c11f94ec51e61dd8fb9a077919bd582b50b68528 (patch) | |
| tree | 010a801a5673031f831d11886ce4869cfc44afbf | |
| parent | 45f4cbaa123b18d5c6caa442221dd1c46d475517 (diff) | |
| download | infrastructure-c11f94ec51e61dd8fb9a077919bd582b50b68528.tar.gz | |
baserock_frontend/instance-config.yml: to ubuntu
| -rw-r--r-- | baserock_frontend/haproxy.cfg | 2 | ||||
| -rw-r--r-- | baserock_frontend/instance-config.yml | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/baserock_frontend/haproxy.cfg b/baserock_frontend/haproxy.cfg index 1217e957..8a638e57 100644 --- a/baserock_frontend/haproxy.cfg +++ b/baserock_frontend/haproxy.cfg @@ -49,7 +49,7 @@ frontend https-in # This means we only need to have the certificate in one place, and the # configuration of the other instances is simpler. It does mean that we # need to avoid having any insecure machines in the cloud. - bind *:443 ssl no-sslv3 crt /etc/pki/tls/private/baserock.pem + bind *:443 ssl no-sslv3 crt /etc/ssl/private/baserock.pem reqadd X-Forwarded-Proto:\ https # Rules below here implement the URL-based forwarding to the diff --git a/baserock_frontend/instance-config.yml b/baserock_frontend/instance-config.yml index 1cebce31..491ee535 100644 --- a/baserock_frontend/instance-config.yml +++ b/baserock_frontend/instance-config.yml @@ -10,7 +10,7 @@ - name: install SSL certificate copy: content: "{{ lookup('file', '../private/frontend-with-key.pem') }}" - dest: /etc/pki/tls/private/baserock.pem + dest: /etc/ssl/private/baserock.pem owner: haproxy mode: 400 notify: |