mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-13 12:49:54 +08:00
Only do OCSP stapling on the proxies
The actual cache is only set in the proxy HTTP config. While we could set the cache path in the other servers' configs as well, that would be a significantly larger change. Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
@@ -57,7 +57,9 @@
|
||||
{% endif %}
|
||||
|
||||
SSLEngine on
|
||||
SSLUseStapling on
|
||||
{% if ansible_hostname.startswith('proxy') %}
|
||||
SSLUseStapling on
|
||||
{% endif %}
|
||||
{% if certbot %}
|
||||
SSLCertificateFile /etc/pki/tls/certs/{{ site_name }}.cert
|
||||
SSLCertificateKeyFile /etc/pki/tls/private/{{ site_name }}.key
|
||||
|
||||
Reference in New Issue
Block a user