From 39a9aa684dda7c645fe0d40298a6e9a3176aef4f Mon Sep 17 00:00:00 2001 From: Grant Slater Date: Tue, 15 Apr 2014 10:49:16 +0100 Subject: [PATCH] tilecache nginx enable ssl stapling --- cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb index c27a531b3..284b3dfd5 100644 --- a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb +++ b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb @@ -10,6 +10,8 @@ server { ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:30m; ssl_session_timeout 15m; + ssl_stapling on; + resolver <%= node[:networking][:nameservers].join(" ") %>; location / { proxy_pass http://127.0.0.1; proxy_set_header X-Forwarded-For $remote_addr; } -- 2.43.2