From 56079da1d849bbd022efc9c3c715857c0c959be1 Mon Sep 17 00:00:00 2001 From: Dan Fandrich Date: Sat, 10 Feb 2024 22:26:37 -0800 Subject: Connect to the forums server from the proxy via http: The forum's certificate expired so the reverse proxy was returning 500 errors. But, since the forums server is running in a VM (friteuse) on the proxy server (sucuk), data never leaves the machine so there is no need to encrypt it. --- manifests/nodes/sucuk.pp | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) (limited to 'manifests') diff --git a/manifests/nodes/sucuk.pp b/manifests/nodes/sucuk.pp index 8a783cab..fcdb4ce3 100644 --- a/manifests/nodes/sucuk.pp +++ b/manifests/nodes/sucuk.pp @@ -127,11 +127,9 @@ node sucuk { use_ssl => true, } - # connect to ssl so the proxy do not shoke if trying to - # enforce ssl ( note that this has not been tested, maybe this - # is uneeded ) + # forums is running in a VM on the machine so https: isn't necessary apache::vhost::reverse_proxy { "ssl_forums.${::domain}": - url => "https://forums.${::domain}/", + url => "http://forums.${::domain}/", vhost => "forums.${::domain}", use_ssl => true, content => ' -- cgit v1.2.1