Some HTTPS improvements to achieve A+ on Qualsys SSL Labs
[discourse_docker.git] / templates / web.socketed.template.yml
1 run:
2 - file:
3 path: /etc/runit/1.d/remove-old-socket
4 chmod: "+x"
5 contents: |
6 #!/bin/bash
7 rm -f /shared/nginx.http*.sock
8 - file:
9 path: /etc/runit/3.d/remove-old-socket
10 chmod: "+x"
11 contents: |
12 #!/bin/bash
13 rm -f /shared/nginx.http*.sock
14 - replace:
15 filename: "/etc/nginx/conf.d/discourse.conf"
16 from: /listen 80;/
17 to: |
18 listen unix:/shared/nginx.http.sock;
19 set_real_ip_from unix:;
20 - replace:
21 filename: "/etc/nginx/conf.d/discourse.conf"
22 from: /listen 443 ssl http2;/
23 to: |
24 listen unix:/shared/nginx.https.sock ssl http2;
25 set_real_ip_from unix:;