Enable SSL on hydra.nixos.org
Eelco Dolstra committed
Sep 16, 2013 at 15:02 UTC
98cd6b0a84fb73f1159c09731c06c4eba903ba84
1 file changed
+15
delft/delft-webserver.nix
+15
@@ -193,10 +193,25 @@ in
193
}
194
195
{ hostName = "hydra.nixos.org";
196
+ globalRedirect = "https://hydra.nixos.org/";
197
+ }
198
+
199
+ { hostName = "hydra.nixos.org";
200
+
201
+ enableSSL = true;
202
+ sslServerCert = "/root/ssl-secrets/ssl-nixos-org.crt";
203
+ sslServerKey = "/root/ssl-secrets/ssl-nixos-org.key";
204
+
205
logFormat = ''"%h %l %u %t \"%r\" %>s %b %D"'';
206
extraConfig = ''
207
TimeOut 900
208
209
+ SSLCertificateChainFile /root/ssl-secrets/startssl-class1.pem
210
+ SSLCACertificateFile /root/ssl-secrets/startssl-ca.pem
211
+ # Required by Catalyst.
212
+ RequestHeader set X-Forwarded-Proto https
213
+ RequestHeader set X-Forwarded-Port 443
214
+
215
<Proxy *>
216
Order deny,allow
217
Allow from all