eheydrick

nginx conf for proxying the FreeIPA UI. ipa.my.org is the proxy name, realipa.my.org is the master.

server {
  listen 443 ssl;
  server_name ipa.my.org;
  ssl on;
  ssl_certificate /etc/nginx/ssl/ipa.crt;
  ssl_certificate_key /etc/nginx/ssl/ipa.key;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers AES256+EECDH:AES256+EDH:AES128+EECDH!aNULL;