vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #3243 from quay/fix-old-ssl-handling

Browse source 
Forgot that we use proxy protocol for production, so we need a new block for v1.quay.io
This commit is contained in:
Joseph Schorr 2018-09-06 14:00:31 -04:00 committed by GitHub
commit 49edf51a48
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
conf/nginx/nginx.conf.jnj
View file

@ -47,7 +47,7 @@ http {
server {
include server-base.conf;
server_name v1.quay.io;
server_name v1-staging.quay.io;
ssl_certificate ../stack/ssl.old.cert;
ssl_certificate_key ../stack/ssl.old.key;
@ -81,6 +81,25 @@ http {
access_log /dev/stdout lb_logs;
}
server {
server_name v1.quay.io;
ssl_certificate ../stack/ssl.old.cert;
ssl_certificate_key ../stack/ssl.old.key;
include server-base.conf;
listen 8443 ssl proxy_protocol;
ssl on;
# This header must be set only for HTTPS
add_header Strict-Transport-Security "max-age=63072000; preload";
real_ip_header proxy_protocol;
access_log /dev/stdout lb_logs;
}
server {
include vhost-traffic-status.conf;