Skip to content

SSL#1

Open
mosamlife wants to merge 185 commits into
mosamlife:masterfrom
carlalexander:master
Open

SSL#1
mosamlife wants to merge 185 commits into
mosamlife:masterfrom
carlalexander:master

Conversation

@mosamlife

Copy link
Copy Markdown
Owner

SSL Support

The backend server will always receive an unencrypted request from Varnish. We need to use the `X-Forwarded-Proto` header to set the value of the `HTTPS` server variable. This will let php-fpm know if the request used https or not.
Prevents issues where debops.nginx doesn't detect the default server.
This prevents nginx gateway errors if Varnish goes offline for some reason. In those situations, the Varnish upstream will failover to the WordPress backend automatically.
Added the flag to allow insecure connections. Otherwise, the cron job wouldn't work for insecure connections like self-signed certificates.
This will let us handle more complex configuration logic outside of Ansible tasks. We'll start by just putting the global parameters for URL and path there.
carlalexander and others added 8 commits August 31, 2015 07:30
The host header of the Varnish probe wasn't the same as the URL of the WordPress site. This means that WordPress could be confused by the request. This happened during multisite testing where the site would return a 302 redirect instead of a 200 response.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants