coredotbin/ansible-role-nextcloud
1
0
Fork 0
Code Issues Pull Requests Projects Releases 2 Wiki Activity

Generalized SSL cert and key paths

Browse Source
This commit is contained in:
Corbin Bartsch 2022-04-10 22:46:56 -04:00
parent 0c75ba406c
commit 78d97cbb13
Signed by: coredotbin
GPG Key ID: 32D3B80A08D93212
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
defaults/main.yaml
View File

@ -9,6 +9,8 @@ nextcloud_subdomain: nextcloud
nextcloud_www_path: '/var/www/nextcloud/' nextcloud_www_path: '/var/www/nextcloud/'
nextcloud_ssl: false nextcloud_ssl: false
nextcloud_ssl_certificate_path: "/etc/ssl/nginx/{{ nextcloud_subdomain }}.{{ domain_name }}.crt"
nextcloud_ssl_key_path: "/etc/ssl/nginx/{{ nextcloud_subdomain }}.{{ domain_name }}.key"
# Apache configuration # Apache configuration
@ -25,5 +27,3 @@ nextcloud_apache2_config_path: '/etc/apache2/sites-available/nextcloud.conf'
# Configure with nginx rather than Apache # Configure with nginx rather than Apache
nextcloud_nginx: false nextcloud_nginx: false
nextcloud_nginx_config_path: "/etc/nginx/nginx.conf" nextcloud_nginx_config_path: "/etc/nginx/nginx.conf"
nextcloud_nginx_ssl_certificate_path: "/etc/ssl/nginx/{{ nextcloud_subdomain }}.{{ domain_name }}.crt"
nextcloud_nginx_ssl_key_path: "/etc/ssl/nginx/{{ nextcloud_subdomain }}.{{ domain_name }}.key"

4
templates/nginx.conf.j2
View File

@ -31,8 +31,8 @@ server {
# Use Mozilla's guidelines for SSL/TLS settings # Use Mozilla's guidelines for SSL/TLS settings
# https://mozilla.github.io/server-side-tls/ssl-config-generator/ # https://mozilla.github.io/server-side-tls/ssl-config-generator/
ssl_certificate {{ nextcloud_nginx_ssl_certificate_path }}; ssl_certificate {{ nextcloud_ssl_certificate_path }};
ssl_certificate_key {{ nextclodu_nginx_ssl_key_path }}; ssl_certificate_key {{ nextcloud_ssl_key_path }};
# HSTS settings # HSTS settings
# WARNING: Only add the preload option once you read about # WARNING: Only add the preload option once you read about