WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

use public_hostname because letsencrypt knows it by that name

Browse Source
This commit is contained in:
Kevin Fenzi
2018-09-18 19:10:20 +00:00
parent 4252cab795
commit 4458507fc9
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/taskotron/ssl-taskotron/templates/ssl.conf.j2
View File

@@ -101,14 +101,14 @@ SSLCipherSuite {{ ssl_ciphers }}
# the certificate is encrypted, then you will be prompted for a
# pass phrase. Note that a kill -HUP will prompt again. A new
# certificate can be generated using the genkey(1) command.
SSLCertificateFile /etc/pki/tls/certs/{{ inventory_hostname }}.crt
SSLCertificateFile /etc/pki/tls/certs/{{ public_hostname }}.crt
# Server Private Key:
# If the key is not combined with the certificate, use this
# directive to point at the key file. Keep in mind that if
# you've both a RSA and a DSA private key you can configure
# both in parallel (to also allow the use of DSA ciphers, etc.)
SSLCertificateKeyFile /etc/pki/tls/private/{{ inventory_hostname }}.key
SSLCertificateKeyFile /etc/pki/tls/private/{{ public_hostname }}.key
# Server Certificate Chain:
# Point SSLCertificateChainFile at a file containing the