4edb378b1e
Apply configuration to add request time to the access log. Creates virtual hosts for each Keystone service. Enables SSL termination within Nginx. The Uwsgi sockets are updated to match the Keystone developer docs to improve consistency of experience for operators. No Shibboleth integration is included. Not introducing any additional Nginx restarts based on changes in Federation configuration yet for this reason. Change-Id: Iec42810be7ff6d05fa38deb23996e66e0c34da8e Related: blueprint keystone-uwsgi
21 lines
572 B
Django/Jinja
21 lines
572 B
Django/Jinja
# {{ ansible_managed }}
|
|
[uwsgi]
|
|
uid = {{ keystone_system_user_name }}
|
|
gid = {{ keystone_system_group_name }}
|
|
|
|
virtualenv = /openstack/venvs/keystone-{{ keystone_venv_tag }}
|
|
wsgi-file = {{ keystone_bin }}/{{ item }}
|
|
http = :{{ keystone_uwsgi_ports[item]['http'] }}
|
|
socket = 127.0.0.1:{{ keystone_uwsgi_ports[item]['socket'] }}
|
|
|
|
master = true
|
|
enable-threads = true
|
|
processes = {{ keystone_wsgi_processes }}
|
|
threads = {{ keystone_wsgi_threads }}
|
|
exit-on-reload = true
|
|
die-on-term = true
|
|
lazy-apps = true
|
|
add-header = Connection: close
|
|
buffer-size = 65535
|
|
thunder-lock = true
|