From c11f94ec51e61dd8fb9a077919bd582b50b68528 Mon Sep 17 00:00:00 2001 From: Pedro Alvarez Date: Wed, 18 Aug 2021 13:16:09 +0200 Subject: baserock_frontend/instance-config.yml: to ubuntu --- baserock_frontend/haproxy.cfg | 2 +- baserock_frontend/instance-config.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/baserock_frontend/haproxy.cfg b/baserock_frontend/haproxy.cfg index 1217e957..8a638e57 100644 --- a/baserock_frontend/haproxy.cfg +++ b/baserock_frontend/haproxy.cfg @@ -49,7 +49,7 @@ frontend https-in # This means we only need to have the certificate in one place, and the # configuration of the other instances is simpler. It does mean that we # need to avoid having any insecure machines in the cloud. - bind *:443 ssl no-sslv3 crt /etc/pki/tls/private/baserock.pem + bind *:443 ssl no-sslv3 crt /etc/ssl/private/baserock.pem reqadd X-Forwarded-Proto:\ https # Rules below here implement the URL-based forwarding to the diff --git a/baserock_frontend/instance-config.yml b/baserock_frontend/instance-config.yml index 1cebce31..491ee535 100644 --- a/baserock_frontend/instance-config.yml +++ b/baserock_frontend/instance-config.yml @@ -10,7 +10,7 @@ - name: install SSL certificate copy: content: "{{ lookup('file', '../private/frontend-with-key.pem') }}" - dest: /etc/pki/tls/private/baserock.pem + dest: /etc/ssl/private/baserock.pem owner: haproxy mode: 400 notify: -- cgit v1.2.1