certificate for reverse proxy

This commit is contained in:
Emmanuel Garette 2022-10-01 19:29:09 +02:00
parent ffaed709df
commit abe9155b4c

View file

@ -2,8 +2,8 @@
<rougail version="0.10"> <rougail version="0.10">
<services> <services>
<service name="nginx" manage="False"> <service name="nginx" manage="False">
<file file_type="variable" source="revprox.crt">revprox_cert_file</file> <file file_type="variable" source="revprox.crt">revprox_client_cert_file</file>
<file file_type="variable" source="revprox.key" owner_type="variable" owner="revprox_client_cert_owner" group_type="variable" group="revprox_client_cert_group" mode="400">revprox_key_file</file> <file file_type="variable" source="revprox.key" owner_type="variable" owner="revprox_client_cert_owner" group_type="variable" group="revprox_client_cert_group" mode="400">revprox_client_key_file</file>
</service> </service>
</services> </services>
<variables> <variables>
@ -31,8 +31,8 @@
<variable name="revprox_client_cert_group" type="unix_user" description="Reverse proxy certificate group"> <variable name="revprox_client_cert_group" type="unix_user" description="Reverse proxy certificate group">
<value>root</value> <value>root</value>
</variable> </variable>
<variable name="revprox_cert_file" type="filename" description="Reverse proxy certificate filename" hidden="True"/> <variable name="revprox_client_cert_file" type="filename" description="Reverse proxy certificate filename" hidden="True"/>
<variable name="revprox_key_file" type="filename" description="Reverse proxy private key filename" hidden="True"/> <variable name="revprox_client_key_file" type="filename" description="Reverse proxy private key filename" hidden="True"/>
</family> </family>
</variables> </variables>
<constraints> <constraints>
@ -50,13 +50,13 @@
<param type="variable">tls_cert_directory</param> <param type="variable">tls_cert_directory</param>
<param>revprox.crt</param> <param>revprox.crt</param>
<param name="join">/</param> <param name="join">/</param>
<target>revprox_cert_file</target> <target>revprox_client_cert_file</target>
</fill> </fill>
<fill name="calc_value"> <fill name="calc_value">
<param type="variable">tls_key_directory</param> <param type="variable">tls_key_directory</param>
<param>revprox.key</param> <param>revprox.key</param>
<param name="join">/</param> <param name="join">/</param>
<target>revprox_key_file</target> <target>revprox_client_key_file</target>
</fill> </fill>
</constraints> </constraints>
</rougail> </rougail>