Fix nginx config, deploy LE cert

This commit is contained in:
Basti 2021-11-29 13:33:43 -06:00
parent e414dfc23f
commit 0e1b362644
Signed by untrusted user: basti
GPG Key ID: 9F88009D31D99C72
2 changed files with 15 additions and 7 deletions

View File

@ -12,12 +12,13 @@
"hostname": "rsk-testnet-2", "hostname": "rsk-testnet-2",
"ipaddress": "192.168.122.29", "ipaddress": "192.168.122.29",
"roles": [ "roles": [
"rsk_testnet" "rskj_testnet"
], ],
"recipes": [ "recipes": [
"kosmos-base", "kosmos-base",
"kosmos-base::default", "kosmos-base::default",
"kosmos_rsk::rskj", "kosmos_rsk::rskj",
"kosmos_rsk::nginx",
"apt::default", "apt::default",
"timezone_iii::default", "timezone_iii::default",
"timezone_iii::debian", "timezone_iii::debian",
@ -34,7 +35,18 @@
"hostname::default", "hostname::default",
"kosmos_rsk::firewall", "kosmos_rsk::firewall",
"firewall::default", "firewall::default",
"chef-sugar::default" "chef-sugar::default",
"kosmos-nginx::default",
"nginx::default",
"nginx::package",
"nginx::ohai_plugin",
"nginx::repo",
"nginx::commons",
"nginx::commons_dir",
"nginx::commons_script",
"nginx::commons_conf",
"kosmos-nginx::firewall",
"kosmos-base::letsencrypt"
], ],
"platform": "ubuntu", "platform": "ubuntu",
"platform_version": "20.04", "platform_version": "20.04",
@ -55,4 +67,4 @@
"recipe[kosmos-base]", "recipe[kosmos-base]",
"role[rskj_testnet]" "role[rskj_testnet]"
] ]
} }

View File

@ -12,12 +12,8 @@ server {
access_log <%= node[:nginx][:log_dir] %>/<%= @domain %>.access.log json; access_log <%= node[:nginx][:log_dir] %>/<%= @domain %>.access.log json;
error_log <%= node[:nginx][:log_dir] %>/<%= @domain %>.error.log warn; error_log <%= node[:nginx][:log_dir] %>/<%= @domain %>.error.log warn;
root <%= @root_dir %>;
location / { location / {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_redirect off; proxy_redirect off;
proxy_pass localhost:<%= @port %>; proxy_pass localhost:<%= @port %>;