From: Grant Slater <git@firefishy.com>
Date: Tue, 15 Apr 2014 09:49:16 +0000 (+0100)
Subject: tilecache nginx enable ssl stapling
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/39a9aa684dda7c645fe0d40298a6e9a3176aef4f

tilecache nginx enable ssl stapling
---

diff --git a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb
index c27a531b3..284b3dfd5 100644
--- a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb
+++ b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb
@@ -10,6 +10,8 @@ server {
     ssl_prefer_server_ciphers on;
     ssl_session_cache shared:SSL:30m;
     ssl_session_timeout 15m;
+    ssl_stapling on;
+    resolver <%= node[:networking][:nameservers].join(" ") %>;
 
     location / { proxy_pass http://127.0.0.1; proxy_set_header X-Forwarded-For $remote_addr; }