1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
#
# Managed by Puppet
#
webserver: {
access-log-config: <%= @server_puppetserver_dir %>/request-logging.xml
client-auth: want
<%- if @server_http -%>
host: <%= @server_ip %>
port: <%= @server_http_port %>
<%- end -%>
ssl-host: <%= @server_ip %>
ssl-port: <%= @server_port %>
ssl-cert: <%= @server_ssl_cert %>
ssl-key: <%= @server_ssl_cert_key %>
ssl-ca-cert: <%= @server_ssl_ca_cert %>
<%- if @server_crl_enable -%>
ssl-crl-path: <%= @server_ssl_ca_crl %>
<%- end -%>
<%- if @server_ca -%>
ssl-cert-chain: <%= @server_ssl_chain %>
<%- end -%>
idle-timeout-milliseconds: <%= @server_web_idle_timeout %>
ssl-protocols: [
<%- @server_ssl_protocols.each do |ssl_protocol| -%>
<%= ssl_protocol %>,
<%- end -%>
]
cipher-suites: [
<%- @server_cipher_suites.each do |cipher_suite| -%>
<%= cipher_suite %>,
<%- end -%>
]
<%- if @acceptor_threads -%>
acceptor-threads: <%= @acceptor_threads %>
<%- end -%>
<%- if @selector_threads -%>
selector-threads: <%= @selector_threads %>
<%- end -%>
<%- if @ssl_acceptor_threads -%>
ssl-acceptor-threads: <%= @ssl_acceptor_threads %>
<%- end -%>
<%- if @ssl_selector_threads -%>
ssl-selector-threads: <%= @ssl_selector_threads %>
<%- end -%>
<%- if @max_threads -%>
max-threads: <%= @max_threads %>
<%- end -%>
}
|
