From: Christian Pointner <equinox@realraum.at>
Date: Sat, 6 Jul 2019 23:13:35 +0000 (+0200)
Subject: fix ssl config for dokuwiki nginx vhost
X-Git-Url: https://git.realraum.at/?a=commitdiff_plain;h=2d02afca7c0555f86164435eed66c923c3e4d41e;p=noc.git

fix ssl config for dokuwiki nginx vhost
---

diff --git a/ansible/roles/web/dokuwiki/templates/nginx.j2 b/ansible/roles/web/dokuwiki/templates/nginx.j2
index 0db80ad..642cc3c 100644
--- a/ansible/roles/web/dokuwiki/templates/nginx.j2
+++ b/ansible/roles/web/dokuwiki/templates/nginx.j2
@@ -4,6 +4,15 @@ server {
 
     server_name {{ dokuwiki_urls | join(' ') }};
 
+    include snippets/acmetool.conf;
+    include snippets/ssl.conf;
+    ssl_certificate /var/lib/acme/live/{{ dokuwiki_urls[0] }}/fullchain;
+    ssl_certificate_key /var/lib/acme/live/{{ dokuwiki_urls[0] }}/privkey;
+    include snippets/hsts.conf;
+
+    include snippets/security-headers.conf;
+
+
     client_max_body_size 4M;
     client_body_buffer_size 128k;