From: Tom Hughes <tom@compton.nu>
Date: Mon, 13 Apr 2020 08:15:23 +0000 (+0100)
Subject: Use server specific SSL certificates for nominatim
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/ebcf085695579bfb93436e91dc1fe3e60fcee0cf?hp=-c

Use server specific SSL certificates for nominatim
---

ebcf085695579bfb93436e91dc1fe3e60fcee0cf
diff --git a/cookbooks/nominatim/templates/default/apache.erb b/cookbooks/nominatim/templates/default/apache.erb
index 9d29290e8..123c758f5 100644
--- a/cookbooks/nominatim/templates/default/apache.erb
+++ b/cookbooks/nominatim/templates/default/apache.erb
@@ -13,8 +13,8 @@
     # Enable SSL
     SSLEngine on
     SSLProxyEngine on
-    SSLCertificateFile /etc/ssl/certs/nominatim.openstreetmap.org.pem
-    SSLCertificateKeyFile /etc/ssl/private/nominatim.openstreetmap.org.key
+    SSLCertificateFile /etc/ssl/certs/<%= node[:fqdn] %>.pem
+    SSLCertificateKeyFile /etc/ssl/private/<%= node[:fqdn] %>.key
 
     # Remove Proxy request header to mitigate https://httpoxy.org/
     RequestHeader unset Proxy early