4cab734074d688f60009cf00028d3b978489e2e6
[oom.git] / kubernetes / policy / components / policy-clamp-fe / resources / config / default.conf
1 server {
2
3   listen 2443 default ssl;
4   ssl_protocols TLSv1.2;
5   {{ if .Values.global.aafEnabled }}
6   ssl_certificate {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_pem}};
7   ssl_certificate_key {{.Values.certInitializer.credsPath}}/{{.Values.certInitializer.clamp_key}};
8   {{ else }}
9   ssl_certificate /etc/ssl/clamp.pem;
10   ssl_certificate_key /etc/ssl/clamp.key;
11   {{ end }}
12
13   ssl_verify_client optional_no_ca;
14     location /restservices/clds/ {
15         proxy_pass https://policy-clamp-be:8443;
16         proxy_set_header X-SSL-Cert $ssl_client_escaped_cert;
17     }
18
19   location / {
20     root   /usr/share/nginx/html;
21     index  index.html index.htm;
22     try_files $uri $uri/ /index.html;
23   }
24
25   error_page   500 502 503 504  /50x.html;
26
27   location = /50x.html {
28     root   /usr/share/nginx/html;
29   }
30
31 }