change to use wildcard certificates

This commit is contained in:
Philip Henning 2025-01-28 18:49:38 +01:00
parent 0272c062d3
commit 452c255314
4 changed files with 24 additions and 14 deletions

View file

@ -51,8 +51,8 @@ server {
http2 on;
server_name ${NGINX_SERVERNAME};
ssl_certificate /etc/nginx/ssl/certs/sso.base23.de.crt;
ssl_certificate_key /etc/nginx/ssl/certs/sso.base23.de.key;
ssl_certificate /etc/nginx/ssl/certs/_.base23.de.crt;
ssl_certificate_key /etc/nginx/ssl/certs/_.base23.de.key;
ssl_session_timeout ${NGINX_SSL_SESSION_TIMEOUT};
ssl_session_cache ${NGINX_SSL_SESSION_CACHE};
@ -71,7 +71,7 @@ server {
ssl_stapling_verify ${NGINX_SSL_STAPLING_VERIFY};
# verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /etc/nginx/ssl/certs/sso.base23.de.issuer.crt;
ssl_trusted_certificate /etc/nginx/ssl/certs/_.base23.de.issuer.crt;
# replace with the IP address of your resolver
resolver ${NGINX_RESOLVER};