pillar/cluster/denc/web-proxy.sls

@@ -90,15 +90,18 @@ nginx:
     {{ nginx_crtkeypair('lysergic', 'lysergic.dev') | indent }}
       - include: snippets/tls
     tls_syscidsso:
+      - ssl_trusted_certificate: {{ trustcrt }}
       - ssl_client_certificate:  {{ trustcrt }}
       - ssl_certificate:         /etc/ssl/syscid/sso.syscid.com.crt
       - ssl_certificate_key:     /etc/ssl/syscid/sso.syscid.com.key
       - ssl_ocsp:                'on'
       - ssl_ocsp_responder:      {{ stapler }}
+      - ssl_stapling:            'on'
       - ssl_stapling_responder:  {{ stapler }}
+      - ssl_stapling_verify:     'on'
       - ssl_verify_client:       'on'
       - resolver:                {{ resolver }} ipv6=off
-      - include:                 snippets/tls
+      - include:                 snippets.d/tls
 
   servers:
     managed:
@@ -108,7 +111,7 @@ nginx:
         - proxy_cache_path: /var/cache/nginx/sso_public keys_zone=cache_sso_public:10m
         - proxy_cache_path: /var/cache/nginx/sso_private keys_zone=cache_sso_private:10m
         - upstream jboss:
-          - ip_hash: ''
+          - ip: hash
           - server:
             - theia.backend.syscid.com:8443
             - orpheus.backend.syscid.com:8443