diff options
-rw-r--r-- | baserock_frontend/haproxy.cfg | 2 | ||||
-rw-r--r-- | baserock_frontend/instance-config.yml | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/baserock_frontend/haproxy.cfg b/baserock_frontend/haproxy.cfg index 1217e957..8a638e57 100644 --- a/baserock_frontend/haproxy.cfg +++ b/baserock_frontend/haproxy.cfg @@ -49,7 +49,7 @@ frontend https-in # This means we only need to have the certificate in one place, and the # configuration of the other instances is simpler. It does mean that we # need to avoid having any insecure machines in the cloud. - bind *:443 ssl no-sslv3 crt /etc/pki/tls/private/baserock.pem + bind *:443 ssl no-sslv3 crt /etc/ssl/private/baserock.pem reqadd X-Forwarded-Proto:\ https # Rules below here implement the URL-based forwarding to the diff --git a/baserock_frontend/instance-config.yml b/baserock_frontend/instance-config.yml index 1cebce31..491ee535 100644 --- a/baserock_frontend/instance-config.yml +++ b/baserock_frontend/instance-config.yml @@ -10,7 +10,7 @@ - name: install SSL certificate copy: content: "{{ lookup('file', '../private/frontend-with-key.pem') }}" - dest: /etc/pki/tls/private/baserock.pem + dest: /etc/ssl/private/baserock.pem owner: haproxy mode: 400 notify: |