X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/125dd3b1e5f34156b002951f504f5346cc5d7e8d..f3a1fcb306856fc904c7e8051ccb69ea85e5640f:/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_keepproxy_configuration.sls diff --git a/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_keepproxy_configuration.sls b/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_keepproxy_configuration.sls index 2f00524f98..690d9413b4 100644 --- a/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_keepproxy_configuration.sls +++ b/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_keepproxy_configuration.sls @@ -3,6 +3,8 @@ # # SPDX-License-Identifier: AGPL-3.0 +{%- import_yaml "ssl_key_encrypted.sls" as imported %} + ### NGINX nginx: ### SERVER @@ -55,5 +57,8 @@ nginx: - include: snippets/ssl_hardening_default.conf - ssl_certificate: __CERT_PEM__ - ssl_certificate_key: __CERT_KEY__ + {%- if imported.ssl_key_encrypted.enabled %} + - ssl_password_file: {{ imported.ssl_key_encrypted.ssl_password_file }} + {%- endif %} - access_log: /var/log/nginx/keepproxy.__CLUSTER__.__DOMAIN__.access.log combined - error_log: /var/log/nginx/keepproxy.__CLUSTER__.__DOMAIN__.error.log