libretic/ansible-role-reverse_proxy
7
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

ajout de l'option reverse_proxy_validate_certs

Browse source
This commit is contained in:
Navas 2024-12-25 12:57:09 +01:00
parent f4316c5ed7
commit c95b1fb3ec
2 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
defaults/main.yml
View file

@ -2,4 +2,6 @@ reverse_proxy_SSLProtocol: "all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1"
reverse_proxy_SSLCipherSuite: "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH !SHA1 !DHE !EDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4" reverse_proxy_SSLCipherSuite: "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH !SHA1 !DHE !EDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
reverse_proxy_default_website: https://www.libretic.fr reverse_proxy_default_website: https://www.libretic.fr
reverse_proxy_default_issue_url: https://www.libretic.fr/contact reverse_proxy_default_issue_url: https://www.libretic.fr/contact
reverse_proxy_additional_certificates: [] reverse_proxy_additional_certificates: []
# surcharger à false pour forcer le téléchargement sur des serveurs avec certificats invalides
reverse_proxy_validate_certs: true

2
tasks/main.yml
View file

@ -200,6 +200,7 @@
mode: u=rw,g=r,o=r mode: u=rw,g=r,o=r
owner: root owner: root
group: root group: root
validate_certs: "{{ reverse_proxy_validate_certs }}"
with_items: with_items:
- "{{ reverse_proxy_additional_certificates }}" - "{{ reverse_proxy_additional_certificates }}"
notify: notify:
@ -214,6 +215,7 @@
mode: u=rw,g=r,o= mode: u=rw,g=r,o=
owner: root owner: root
group: root group: root
validate_certs: "{{ reverse_proxy_validate_certs }}"
with_items: with_items:
- "{{ reverse_proxy_additional_certificates }}" - "{{ reverse_proxy_additional_certificates }}"
notify: notify: