certificate for reverse proxy

This commit is contained in:
Emmanuel Garette 2022-10-01 19:29:09 +02:00
parent ffaed709df
commit abe9155b4c

View file

@ -2,8 +2,8 @@
<rougail version="0.10">
<services>
<service name="nginx" manage="False">
<file file_type="variable" source="revprox.crt">revprox_cert_file</file>
<file file_type="variable" source="revprox.key" owner_type="variable" owner="revprox_client_cert_owner" group_type="variable" group="revprox_client_cert_group" mode="400">revprox_key_file</file>
<file file_type="variable" source="revprox.crt">revprox_client_cert_file</file>
<file file_type="variable" source="revprox.key" owner_type="variable" owner="revprox_client_cert_owner" group_type="variable" group="revprox_client_cert_group" mode="400">revprox_client_key_file</file>
</service>
</services>
<variables>
@ -31,8 +31,8 @@
<variable name="revprox_client_cert_group" type="unix_user" description="Reverse proxy certificate group">
<value>root</value>
</variable>
<variable name="revprox_cert_file" type="filename" description="Reverse proxy certificate filename" hidden="True"/>
<variable name="revprox_key_file" type="filename" description="Reverse proxy private key filename" hidden="True"/>
<variable name="revprox_client_cert_file" type="filename" description="Reverse proxy certificate filename" hidden="True"/>
<variable name="revprox_client_key_file" type="filename" description="Reverse proxy private key filename" hidden="True"/>
</family>
</variables>
<constraints>
@ -50,13 +50,13 @@
<param type="variable">tls_cert_directory</param>
<param>revprox.crt</param>
<param name="join">/</param>
<target>revprox_cert_file</target>
<target>revprox_client_cert_file</target>
</fill>
<fill name="calc_value">
<param type="variable">tls_key_directory</param>
<param>revprox.key</param>
<param name="join">/</param>
<target>revprox_key_file</target>
<target>revprox_client_key_file</target>
</fill>
</constraints>
</rougail>