dicos/99_one-frontend.xml: Début du travail sur le support HTTPS

Ajout d'une configuration nginx "basique".
Ouverture des ports du firewall
Création du script d'activation de la configuration nginx

ref #9081 @3h
This commit is contained in:
2015-08-11 15:16:45 +02:00
parent 2535d69274
commit cb338dae2f
4 changed files with 53 additions and 2 deletions

30
tmpl/nginx-nebula.conf Normal file
View File

@ -0,0 +1,30 @@
#### OpenNebula Sunstone upstream
upstream sunstone {
server 127.0.0.1:%%port_sunstone;
# server %%adresse_ip_eth0:%%port_sunstone;
}
#### cloudserver.org HTTP virtual host
server {
listen 80;
server_name cloudserver.org;
### Permanent redirect to HTTPS (optional)
return 301 https://$server_name:443;
}
#### cloudserver.org HTTPS virtual host
server {
listen 443;
server_name cloudserver.org;
### SSL Parameters
ssl on;
ssl_certificate %%server_pem;
ssl_certificate_key %%server_key;
### Proxy requests to upstream
location / {
proxy_pass http://sunstone;
}
}

View File

@ -28,8 +28,8 @@
# Server Configuration
#
#:host: 127.0.0.1
:host: %%ip_sunstone
:host: 127.0.0.1
#:host: %%ip_sunstone
:port: %%port_sunstone
# Place where to store sessions, this value can be memory or memcache