summaryrefslogtreecommitdiff
path: root/https.conf
diff options
context:
space:
mode:
authorLuke Shumaker <lukeshu@sbcglobal.net>2016-10-04 13:26:55 -0400
committerLuke Shumaker <lukeshu@sbcglobal.net>2016-10-04 13:26:55 -0400
commit4c15c8881087781b7611f4cf557389392889e1f1 (patch)
tree80103f968eb9d0581e77d4259a77bf2ac7dc78a5 /https.conf
parent6221fa4734eb95d3fd98421db4354d44f8cace8f (diff)
add an HTTPS version
It does it's own process management (because socat is stupid and won't let you pass an arbitrary socket to OPENSSL), instead of outsourcing it to systemd/inetd/whatever. And stunnel is too complicated.
Diffstat (limited to 'https.conf')
-rw-r--r--https.conf12
1 files changed, 12 insertions, 0 deletions
diff --git a/https.conf b/https.conf
new file mode 100644
index 0000000..14cfaec
--- /dev/null
+++ b/https.conf
@@ -0,0 +1,12 @@
+#!/hint/bash
+# Copyright 2016 Luke Shumaker
+# License: WTFPLv2
+
+port=8443
+ssl_options=(
+ cert=/etc/ssl/private/myhostname/fullchain.pem
+ key=/etc/ssl/private/myhostname/privkey.pem
+ dhparam=/etc/ssl/private/dhparam-2048.pem
+
+ verify=0
+)