diff options
| author | Sam Thursfield <sam.thursfield@codethink.co.uk> | 2015-03-27 17:38:22 +0000 |
|---|---|---|
| committer | Baserock Gerrit <gerrit@baserock.org> | 2015-03-30 13:41:18 +0000 |
| commit | c092bb9f60ef8c37d81210f8be3579af7b90ba70 (patch) | |
| tree | e3b9a91dffb370161c2d9f01c15d73ef036f19be /baserock_storyboard/site.pp | |
| parent | 39473587d6b669ccecc6907641aad72942b7fbba (diff) | |
| download | infrastructure-c092bb9f60ef8c37d81210f8be3579af7b90ba70.tar.gz | |
Use HTTPS for all infrastructure.
This is implemented with the HAProxy frontend doing 'SSL termination'.
So internal traffic between the frontend_haproxy instance and the
various machines serving content is unencrypted HTTP as before, but all
traffic that goes over the public internet is encrypted now.
Note that storyboard.baserock.org is not behind HAProxy, and currently
uses a different, self-signed certificate.
Change-Id: I9140def605fe26c9c613066fa6524e3cf817f97c
Diffstat (limited to 'baserock_storyboard/site.pp')
| -rw-r--r-- | baserock_storyboard/site.pp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/baserock_storyboard/site.pp b/baserock_storyboard/site.pp index d062f817..32323877 100644 --- a/baserock_storyboard/site.pp +++ b/baserock_storyboard/site.pp @@ -28,7 +28,7 @@ node default { # need class storyboard::rabbitmq too class { 'storyboard::application': - openid_url => 'http://openid.baserock.org/', + openid_url => 'https://openid.baserock.org/', mysql_host => '192.168.222.30', mysql_database => 'storyboard', |