File tree Expand file tree Collapse file tree 1 file changed +4
-2
lines changed Expand file tree Collapse file tree 1 file changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -9,7 +9,8 @@ upstream puppetmaster_unicorn {
9
9
# define our proxy for breaking up SSL
10
10
server {
11
11
<% unless @disable_ssl -%>
12
- ssl on;
12
+ ssl on;
13
+ listen <%= @listen_address %>:<%= @puppet_proxy_port %> ssl;
13
14
ssl_certificate /var/lib/puppet/ssl/certs/<%= @fqdn %>.pem;
14
15
ssl_certificate_key /var/lib/puppet/ssl/private_keys/<%= @fqdn %>.pem;
15
16
ssl_verify_client optional;
@@ -24,8 +25,9 @@ server {
24
25
proxy_set_header X-Client-DN $ssl_client_s_dn;
25
26
proxy_set_header X-SSL-Subject $ssl_client_s_dn;
26
27
proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
28
+ <% else -%>
29
+ listen <%= @listen_address %>:<%= @puppet_proxy_port %>;
27
30
<% end -%>
28
- listen <%= @listen_address %>:<%= @puppet_proxy_port %> ssl;
29
31
root /var/empty;
30
32
location / {
31
33
proxy_pass http://puppetmaster_unicorn;
You can’t perform that action at this time.
0 commit comments