Use cert bits from home directory

to allow for safer+easier remote updates
This commit is contained in:
2020-02-13 11:03:11 -05:00
parent 1e89d80882
commit 22760e622b
2 changed files with 10 additions and 10 deletions

View File

@@ -5,8 +5,8 @@ server {
listen 443 ssl;
listen [::]:443 ssl;
server_name ${server_name};
ssl_certificate spoke.crt;
ssl_certificate_key spoke.key;
ssl_certificate /home/spoke/spoke.crt;
ssl_certificate_key /home/spoke/spoke.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
access_log /var/log/nginx/spoke.access.log combined;