summaryrefslogtreecommitdiffstats
path: root/kubernetes/oof/charts/oof-has/resources/config/nginx.conf
diff options
context:
space:
mode:
authorIkramullah, Ikram <ikram@research.att.com>2019-04-24 22:24:08 +0000
committerShankar Narayanan <snarayanan@research.att.com>2019-05-09 11:49:12 -0400
commit6cde0b321778c55b4b370e4df14f73fade98740c (patch)
tree70bb561d528fe4f312b1a7875279c4b5a7f1b887 /kubernetes/oof/charts/oof-has/resources/config/nginx.conf
parent474c350ba9492178274c48d30ae21ea89f4b9699 (diff)
Changes related to TLS implemenation for oof-has
update oof certificates to add has hostnames updating oof certs to the latest generated date Change-Id: Ib9191d66eb491975f74062ee5e28b762d9cce9c1 Issue-ID: OPTFRA-461 Signed-off-by: Ikramullah, Ikram <ikram@research.att.com> Signed-off-by: Shankar Narayanan <snarayanan@research.att.com>
Diffstat (limited to 'kubernetes/oof/charts/oof-has/resources/config/nginx.conf')
-rw-r--r--kubernetes/oof/charts/oof-has/resources/config/nginx.conf31
1 files changed, 31 insertions, 0 deletions
diff --git a/kubernetes/oof/charts/oof-has/resources/config/nginx.conf b/kubernetes/oof/charts/oof-has/resources/config/nginx.conf
new file mode 100644
index 0000000000..3db6a21c3a
--- /dev/null
+++ b/kubernetes/oof/charts/oof-has/resources/config/nginx.conf
@@ -0,0 +1,31 @@
+events {
+ worker_connections 768;
+ # multi_accept on;
+}
+
+http {
+ # ...
+ upstream conductor_uwsgi {
+ server 127.0.0.1:80;
+ }
+
+ server {
+
+ listen 8091 ssl;
+ server_name oof;
+ ssl_certificate /etc/nginx/ssl/org.onap.oof.crt;
+ ssl_certificate_key /etc/nginx/ssl/org.onap.oof.key;
+ ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+ ssl_ciphers HIGH:!aNULL:!MD5;
+
+ location / {
+ include /etc/nginx/uwsgi_params;
+ uwsgi_pass conductor_uwsgi;
+
+ uwsgi_param Host $host;
+ uwsgi_param X-Real-IP $remote_addr;
+ uwsgi_param X-Forwarded-For $proxy_add_x_forwarded_for;
+ uwsgi_param X-Forwarded-Proto $http_x_forwarded_proto;
+ }
+ }
+}