File tree Expand file tree Collapse file tree 1 file changed +5
-3
lines changed Expand file tree Collapse file tree 1 file changed +5
-3
lines changed Original file line number Diff line number Diff line change 1
1
# define the new unicorn backend
2
2
upstream puppetmaster_unicorn {
3
3
server unix:/var/run/puppet/puppetmaster_unicorn.sock fail_timeout=5;
4
- <% backup_upstream.each do |server| -%>
4
+ <% @ backup_upstream.each do |server| -%>
5
5
server <%= server %> backup;
6
6
<% end -%>
7
7
}
8
8
9
9
# define our proxy for breaking up SSL
10
10
server {
11
11
<% unless @disable_ssl -%>
12
- ssl on;
12
+ ssl on;
13
+ listen <%= @listen_address %>:<%= @puppet_proxy_port %> ssl;
13
14
ssl_certificate /var/lib/puppet/ssl/certs/<%= @fqdn %>.pem;
14
15
ssl_certificate_key /var/lib/puppet/ssl/private_keys/<%= @fqdn %>.pem;
15
16
ssl_verify_client optional;
@@ -24,8 +25,9 @@ server {
24
25
proxy_set_header X-Client-DN $ssl_client_s_dn;
25
26
proxy_set_header X-SSL-Subject $ssl_client_s_dn;
26
27
proxy_set_header X-SSL-Issuer $ssl_client_i_dn;
28
+ <% else -%>
29
+ listen <%= @listen_address %>:<%= @puppet_proxy_port %>;
27
30
<% end -%>
28
- listen <%= @listen_address %>:<%= @puppet_proxy_port %> ssl;
29
31
root /var/empty;
30
32
location / {
31
33
proxy_pass http://puppetmaster_unicorn;
You can’t perform that action at this time.
0 commit comments