From 3bc317b57273fc0281f0233873fa88c43a852eb6 Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Fri, 10 Aug 2018 12:41:55 +0200 Subject: [PATCH] Added missing SSO configuration --- ansible/files/nginx.conf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ansible/files/nginx.conf b/ansible/files/nginx.conf index b097dc4..927dcf9 100644 --- a/ansible/files/nginx.conf +++ b/ansible/files/nginx.conf @@ -33,6 +33,12 @@ server { ssl_certificate /etc/letsencrypt/live/screenshots.debian.net/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/screenshots.debian.net/privkey.pem; + # Debian SSO based on client certificates + ssl_client_certificate debsso.crt; + ssl_crl debsso.crl; + ssl_verify_client optional; + ssl_verify_depth 1; + #root /opt/debshots/public; server_name _; access_log /var/log/nginx/cache-access.log proxy;