MHK - blöder static proxy

diff --git a/customer/mhk/stage-www01-mhk-kueche-de.pixelpark.net.yaml b/customer/mhk/stage-www01-mhk-kueche-de.pixelpark.net.yaml
index 07e84f89ea81fde47efa25704cb104e3eac7c93a..4154b8550a2daccffc471430d2242d34237b30ff 100644 (file)
--- a/customer/mhk/stage-www01-mhk-kueche-de.pixelpark.net.yaml
+++ b/customer/mhk/stage-www01-mhk-kueche-de.pixelpark.net.yaml
@@ -102,7 +102,11 @@ infra::profile::apache::pp_vhosts:
       - 'set X-Frame-Options: sameorigin'
       - 'set X-XSS-Protection: "1; mode=block"'
       - 'set X-Content-Type-Options: nosniff'
-    custom_fragment: 'SSLProxyEngine on'
+    custom_fragment: |
+            SSLProxyEngine on
+            SSLProxyVerify none
+            SSLProxyCheckPeerCN off
+            SSLProxyCheckPeerName off
 
 logstash::generic_resource:
   webapp:

diff --git a/customer/mhk/stage-www02-mhk-kueche-de.pixelpark.net.yaml b/customer/mhk/stage-www02-mhk-kueche-de.pixelpark.net.yaml
index c65e46b35f8e39bc79e2d3a6bb89a142cfb3c30e..e86a4333d584f7ac41513bf604596ff9df761bcb 100644 (file)
--- a/customer/mhk/stage-www02-mhk-kueche-de.pixelpark.net.yaml
+++ b/customer/mhk/stage-www02-mhk-kueche-de.pixelpark.net.yaml
@@ -102,7 +102,11 @@ infra::profile::apache::pp_vhosts:
       - 'set X-Frame-Options: sameorigin'
       - 'set X-XSS-Protection: "1; mode=block"'
       - 'set X-Content-Type-Options: nosniff'
-    custom_fragment: 'SSLProxyEngine on'
+    custom_fragment: |
+            SSLProxyEngine on
+            SSLProxyVerify none
+            SSLProxyCheckPeerCN off
+            SSLProxyCheckPeerName off
 
 logstash::generic_resource:
   webapp:

diff --git a/customer/mhk/stage-www03-mhk-kueche-de.pixelpark.net.yaml b/customer/mhk/stage-www03-mhk-kueche-de.pixelpark.net.yaml
index 15f565479c0e6fe4815f99c4e8953b59d04c0c4a..a352bed8f0715ffd6789aaca65d9288bee0544b3 100644 (file)
--- a/customer/mhk/stage-www03-mhk-kueche-de.pixelpark.net.yaml
+++ b/customer/mhk/stage-www03-mhk-kueche-de.pixelpark.net.yaml
@@ -102,7 +102,11 @@ infra::profile::apache::pp_vhosts:
       - 'set X-Frame-Options: sameorigin'
       - 'set X-XSS-Protection: "1; mode=block"'
       - 'set X-Content-Type-Options: nosniff'
-    custom_fragment: 'SSLProxyEngine on'
+    custom_fragment: |
+            SSLProxyEngine on
+            SSLProxyVerify none
+            SSLProxyCheckPeerCN off
+            SSLProxyCheckPeerName off
 
 logstash::generic_resource:
   webapp: