#Ansible managed: /home/karlsone/projects/creator/creator-ansible/roles/jdauphant.nginx/templates/site.conf.j2 modified on 2015-12-16 10:43:09 by karlsone on ekarlso-ebook
server {
   listen 443;
   ssl_certificate /etc/nginx/ssl/creator.no.crt;
   ssl_certificate_key /etc/nginx/ssl/creator.no.key;
   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
   ssl_prefer_server_ciphers on;
   ssl_session_cache shared:SSL:10m;
   ssl_dhparam /etc/nginx/ssl/dhparam.pem;
   server_name oam.creator.no;
   location = / {
     return 301 https://oam.creator.no/openam;
   }

   location /openam {
     proxy_pass http://10.0.0.7:8080/openam;
     proxy_set_header        X-Real-IP $remote_addr;
     proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_set_header        Host $http_host;
     proxy_set_header        X-Forwarded-Proto $scheme;

     expires 0m;
   }

}