Commit 6e9f8e4c authored by nimrod's avatar nimrod
Browse files

Refactor snippet to proxy over HTTPS.

parent 4ea5fbb1

snippets/ldap-auth.conf

+1 −5
Original line number Diff line number Diff line
@@ -3,11 +3,7 @@ auth_request /validate; 
location = /validate {

  proxy_pass                        https://auth.shore.co.il/validate;

  proxy_http_version                1.1;

  proxy_ssl_verify                  on;

  proxy_ssl_verify_depth            3;

  proxy_ssl_name                    auth.shore.co.il;

  proxy_ssl_server_name             on;

  proxy_ssl_trusted_certificate     /etc/ssl/certs/ca-certificates.crt;

  include                           snippets/proxy-ssl.conf;

  internal;

  proxy_pass_request_body           off;

  proxy_set_header Content-Length   "";

snippets/proxy-ssl.conf

0 → 100644
+5 −0
Original line number Diff line number Diff line 
proxy_ssl_verify                  on;

proxy_ssl_verify_depth            3;

proxy_ssl_name                    auth.shore.co.il;

proxy_ssl_server_name             on;

proxy_ssl_trusted_certificate     /etc/ssl/certs/ca-certificates.crt;