From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 15 Nov 2025 13:28:34 +0000 (-0300)
Subject: Fix: update deprecated SSL config
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=cde58597fdd74ce0990cbff4af5e839b9639b5c2;p=puppet-nginx.git

Fix: update deprecated SSL config
---

diff --git a/templates/default-ssl.erb b/templates/default-ssl.erb
index 4413461..e82c367 100644
--- a/templates/default-ssl.erb
+++ b/templates/default-ssl.erb
@@ -1,7 +1,6 @@
 server {
-  listen              443 default_server;
+  listen              443 default_server ssl;
   server_name         _;
-  ssl                 on;
   ssl_certificate     /etc/ssl/certs/ssl-cert-snakeoil.pem;
   ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
   return              403;
diff --git a/templates/site-ssl.erb b/templates/site-ssl.erb
index 11a69dd..ae146bb 100644
--- a/templates/site-ssl.erb
+++ b/templates/site-ssl.erb
@@ -5,10 +5,9 @@ proxy_cache_path /var/cache/nginx/<%= @name %> levels=<%= @cache_levels %> keys_
 limit_req_zone <%= @rate_limit_key %> zone=<%= @rate_limit_zone %>:<%= @rate_limit_size %> rate=<%= @rate_limit_rate %>;
 <% end -%>
 server {
-  listen      443;
+  listen      443 ssl;
   server_name <%= @server_name %> <%= @aliases %>;
 
-  ssl on;
   ssl_certificate     /etc/letsencrypt/live/<%= @server_name %>/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/<%= @server_name %>/privkey.pem;