Fix: update deprecated SSL config

diff --git a/templates/default-ssl.erb b/templates/default-ssl.erb
index 44134611a7d33fd42718bd0bd0e1311a28fd6aaf..e82c367243da7619456c482dc0972d346513af1d 100644 (file)
--- a/templates/default-ssl.erb
+++ b/templates/default-ssl.erb
@@ -1,7 +1,6 @@
 server {
-  listen              443 default_server;
+  listen              443 default_server ssl;
   server_name         _;
-  ssl                 on;
   ssl_certificate     /etc/ssl/certs/ssl-cert-snakeoil.pem;
   ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
   return              403;

diff --git a/templates/site-ssl.erb b/templates/site-ssl.erb
index 11a69ddcae570a0956a72992785a70474fd237a3..ae146bbba720be1aaa96d75e6e5a0a9874e479c9 100644 (file)
--- a/templates/site-ssl.erb
+++ b/templates/site-ssl.erb
@@ -5,10 +5,9 @@ proxy_cache_path /var/cache/nginx/<%= @name %> levels=<%= @cache_levels %> keys_
 limit_req_zone <%= @rate_limit_key %> zone=<%= @rate_limit_zone %>:<%= @rate_limit_size %> rate=<%= @rate_limit_rate %>;
 <% end -%>
 server {
-  listen      443;
+  listen      443 ssl;
   server_name <%= @server_name %> <%= @aliases %>;
 
-  ssl on;
   ssl_certificate     /etc/letsencrypt/live/<%= @server_name %>/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/<%= @server_name %>/privkey.pem;