From 421d8d1aa0ba348eac175b49213dd19a8fd1d668 Mon Sep 17 00:00:00 2001 From: Johannes Stoelp Date: Tue, 13 Feb 2024 23:31:06 +0100 Subject: nginx: factor out ssl config into include --- roles/webserver/files/user_conf.d/memzero.conf | 35 ++++---------------------- 1 file changed, 5 insertions(+), 30 deletions(-) (limited to 'roles/webserver/files/user_conf.d/memzero.conf') diff --git a/roles/webserver/files/user_conf.d/memzero.conf b/roles/webserver/files/user_conf.d/memzero.conf index 2038aad..ed3bd9d 100644 --- a/roles/webserver/files/user_conf.d/memzero.conf +++ b/roles/webserver/files/user_conf.d/memzero.conf @@ -7,12 +7,7 @@ server { server_name memzero.de www.memzero.de; # Load the certificate files. - ssl_certificate /etc/letsencrypt/live/memzero/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/memzero/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/memzero/chain.pem; - - # Load the Diffie-Hellman parameter. - ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem; + include /etc/nginx/inc/ssl.conf; root /www/memzero; } @@ -26,12 +21,7 @@ server { server_name blog.memzero.de; # Load the certificate files. - ssl_certificate /etc/letsencrypt/live/memzero/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/memzero/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/memzero/chain.pem; - - # Load the Diffie-Hellman parameter. - ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem; + include /etc/nginx/inc/ssl.conf; root /www/blog; } @@ -45,12 +35,7 @@ server { server_name dav.memzero.de; # Load the certificate files. - ssl_certificate /etc/letsencrypt/live/memzero/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/memzero/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/memzero/chain.pem; - - # Load the Diffie-Hellman parameter. - ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem; + include /etc/nginx/inc/ssl.conf; location / { proxy_set_header Host $host; @@ -71,12 +56,7 @@ server { server_name git.memzero.de; # Load the certificate files. - ssl_certificate /etc/letsencrypt/live/memzero/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/memzero/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/memzero/chain.pem; - - # Load the Diffie-Hellman parameter. - ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem; + include /etc/nginx/inc/ssl.conf; location / { proxy_set_header Host $host; @@ -97,12 +77,7 @@ server { server_name notes.memzero.de; # Load the certificate files. - ssl_certificate /etc/letsencrypt/live/memzero/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/memzero/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/memzero/chain.pem; - - # Load the Diffie-Hellman parameter. - ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem; + include /etc/nginx/inc/ssl.conf; location / { proxy_set_header Host johannst.github.io; -- cgit v1.2.3