tilecache nginx enable ssl stapling
authorGrant Slater <git@firefishy.com>
Tue, 15 Apr 2014 09:49:16 +0000 (10:49 +0100)
committerGrant Slater <git@firefishy.com>
Tue, 15 Apr 2014 09:49:16 +0000 (10:49 +0100)
cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb

index c27a531b35bef15f912eb29bdf460ec85b1e28dc..284b3dfd5b72cdc8e3b5b0c5b5597e5a68d23d45 100644 (file)
@@ -10,6 +10,8 @@ server {
     ssl_prefer_server_ciphers on;
     ssl_session_cache shared:SSL:30m;
     ssl_session_timeout 15m;
+    ssl_stapling on;
+    resolver <%= node[:networking][:nameservers].join(" ") %>;
 
     location / { proxy_pass http://127.0.0.1; proxy_set_header X-Forwarded-For $remote_addr; }