microstack/snap-overlay/templates/cluster-nginx.conf.j2

21 lines
767 B
Django/Jinja

server {
listen 10002 ssl;
error_log syslog:server=unix:/dev/log;
access_log syslog:server=unix:/dev/log;
{% if is_clustered %}
ssl_session_timeout 1d;
ssl_session_tickets off;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_certificate {{ cluster_tls_cert_path }};
ssl_certificate_key {{ cluster_tls_key_path }};
{% endif %}
location / {
include {{ snap }}/usr/conf/uwsgi_params;
uwsgi_param SCRIPT_NAME '';
uwsgi_pass unix://{{ snap_common }}/run/cluster-api.sock;
}
}