Browse Source
* httpcaddyfile: Fix unexpectedly removed policy When user set on_demand tls option in a catch-all (:443) policy, we expect other policies to not have the on_demand enabled See ex in tls_automation_policies_5.txt Btw, we can remove policies if they are **all** empty. * Update caddyconfig/httpcaddyfile/tlsapp.go Co-authored-by: Matt Holt <mholt@users.noreply.github.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>master
Alban Lecocq
4 years ago
committed by
GitHub
2 changed files with 69 additions and 3 deletions
@ -0,0 +1,62 @@ |
|||
a.example.com { |
|||
} |
|||
|
|||
b.example.com { |
|||
} |
|||
|
|||
:443 { |
|||
tls { |
|||
on_demand |
|||
} |
|||
} |
|||
---------- |
|||
{ |
|||
"apps": { |
|||
"http": { |
|||
"servers": { |
|||
"srv0": { |
|||
"listen": [ |
|||
":443" |
|||
], |
|||
"routes": [ |
|||
{ |
|||
"match": [ |
|||
{ |
|||
"host": [ |
|||
"a.example.com" |
|||
] |
|||
} |
|||
], |
|||
"terminal": true |
|||
}, |
|||
{ |
|||
"match": [ |
|||
{ |
|||
"host": [ |
|||
"b.example.com" |
|||
] |
|||
} |
|||
], |
|||
"terminal": true |
|||
} |
|||
] |
|||
} |
|||
} |
|||
}, |
|||
"tls": { |
|||
"automation": { |
|||
"policies": [ |
|||
{ |
|||
"subjects": [ |
|||
"a.example.com", |
|||
"b.example.com" |
|||
] |
|||
}, |
|||
{ |
|||
"on_demand": true |
|||
} |
|||
] |
|||
} |
|||
} |
|||
} |
|||
} |
Loading…
Reference in new issue