[manual] Configure prod to use our wildcard cert.

These changes can be applied with "puppet apply".

(imported from commit 999611539e81f452dd605bb98f70436737747c29)
This commit is contained in:
Luke Faraone 2013-05-29 14:30:30 -04:00
parent b3b0e2fe09
commit 8570f5fe55

View File

@ -19,9 +19,7 @@ server {
ssl on;
# The zephyr.humbughq.com cert uses the app.humbughq.com key.
# It's good for https://humbughq.com too.
ssl_certificate /etc/ssl/certs/zephyr.humbughq.com.combined-chain.crt;
ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;
server_name zephyr.humbughq.com;
@ -38,7 +36,7 @@ server {
ssl on;
ssl_certificate /etc/ssl/certs/www.humbughq.com.combined-chain.crt;
ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;
server_name humbughq.com www.humbughq.com;
@ -54,3 +52,17 @@ server {
include /etc/nginx/humbug-include/app;
}
server {
listen 443;
ssl on;
ssl_certificate /etc/ssl/certs/wildcard-humbughq.com.combined-chain.crt;
ssl_certificate_key /etc/ssl/private/app.humbughq.com.key;
server_name api.humbughq.com;
rewrite ^/.* /api/ break;
include /etc/nginx/humbug-include/app;
}