diff options
| author | Patrick Uiterwijk <puiterwijk@redhat.com> | 2017-04-10 22:06:44 +0200 |
|---|---|---|
| committer | Patrick Uiterwijk <puiterwijk@redhat.com> | 2017-04-10 22:06:52 +0200 |
| commit | 3a8e11cf7eb62625f72c5898f2bd6b43c8a270e1 (patch) | |
| tree | 3e572ce0094d6d5d713a22dc2fc3f9aa3576bb08 /roles/httpd | |
| parent | 989c36132f671503a3abced0e089a8ec683c9949 (diff) | |
| download | ansible-3a8e11cf7eb62625f72c5898f2bd6b43c8a270e1.tar.gz ansible-3a8e11cf7eb62625f72c5898f2bd6b43c8a270e1.tar.xz ansible-3a8e11cf7eb62625f72c5898f2bd6b43c8a270e1.zip | |
Split staging and prod docker push certs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Diffstat (limited to 'roles/httpd')
| -rw-r--r-- | roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf | 2 | ||||
| -rw-r--r-- | roles/httpd/reverseproxy/templates/reversepassproxy.registry.conf | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf index d2c0cd650..fce95b1b3 100644 --- a/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf +++ b/roles/httpd/reverseproxy/templates/reversepassproxy.candidate-registry.conf @@ -8,7 +8,7 @@ ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}} SSLVerifyClient optional SSLVerifyDepth 1 -SSLCACertificateFile /etc/pki/httpd/fedora-server-ca.cert +SSLCACertificateFile /etc/pki/httpd/registry-ca-{{env}}.cert SSLOptions +FakeBasicAuth diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.registry.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.registry.conf index e3e9f5a43..4bdd1b2de 100644 --- a/roles/httpd/reverseproxy/templates/reversepassproxy.registry.conf +++ b/roles/httpd/reverseproxy/templates/reversepassproxy.registry.conf @@ -23,7 +23,7 @@ RewriteRule ^/(.*)$ http://localhost:6081/$1 [P,L] SSLVerifyClient optional SSLVerifyDepth 1 -SSLCACertificateFile /etc/pki/httpd/fedora-server-ca.cert +SSLCACertificateFile /etc/pki/httpd/registry-ca-{{env}}.cert SSLOptions +FakeBasicAuth <Directory /srv/web/registry-signatures> |