From 2572425e304ece32b622321aa7ce9d781eaca086 Mon Sep 17 00:00:00 2001
From: Jan Philipp Timme <jan.philipp@timme.it>
Date: Mon, 12 Oct 2020 12:07:21 +0200
Subject: [PATCH] Use fullchain instead of raw certificate
---
postgrest/tpl/nginx.conf | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/postgrest/tpl/nginx.conf b/postgrest/tpl/nginx.conf
index 506e8fb..7725383 100644
--- a/postgrest/tpl/nginx.conf
+++ b/postgrest/tpl/nginx.conf
@@ -37,7 +37,7 @@ server {
ssl_session_timeout 5m;
ssl on;
- ssl_certificate /etc/hsh-certs/{{ nginx_conf.get('ssl_cert_name', instance_name) }}.pem;
+ ssl_certificate /etc/hsh-certs/{{ nginx_conf.get('ssl_cert_name', instance_name) }}.fullchain.pem;
ssl_certificate_key /etc/hsh-certs/{{ nginx_conf.get('ssl_cert_name', instance_name) }}.key;
# Diffie-Hellman parameter for DHE ciphersuites, recommended 2048 bits
--
GitLab