diff options
| author | Glenn Strauss <gstrauss@gluelogic.com> | 2021-04-03 18:45:51 +0300 |
|---|---|---|
| committer | Glenn Strauss <gstrauss@gluelogic.com> | 2021-04-03 18:45:51 +0300 |
| commit | 2d0b049f67fa836176b8636a060b0930c0a285f6 (patch) | |
| tree | 9e15dfec62e406ac70ba30d94fafdef056d32826 | |
| parent | fd0a45399a69935862aa09cd66d6670786eb6ffc (diff) | |
lighttpd: consistent condition indenting
| -rw-r--r-- | src/templates/partials/lighttpd.hbs | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/src/templates/partials/lighttpd.hbs b/src/templates/partials/lighttpd.hbs index 0d5b06c..bbabba7 100644 --- a/src/templates/partials/lighttpd.hbs +++ b/src/templates/partials/lighttpd.hbs @@ -43,11 +43,11 @@ ssl.openssl.ssl-conf-cmd = ("MinProtocol" => {{#if (includes "TLSv1" output.prot ssl.openssl.ssl-conf-cmd = ("Protocol" => "ALL, -SSLv2, -SSLv3{{#unless (includes "TLSv1" output.protocols)}}, -TLSv1{{/unless}}{{#unless (includes "TLSv1.1" output.protocols)}}, -TLSv1.1{{/unless}}{{#unless (includes "TLSv1.2" output.protocols)}}, -TLSv1.2{{/unless}}") {{/if}} ssl.openssl.ssl-conf-cmd += ("Options" => "{{#if output.serverPreferredOrder}}+{{else}}-{{/if}}ServerPreference") - {{#if output.ciphers.length}} + {{#if output.ciphers.length}} # TLS modules besides mod_openssl might name ciphers differently # See https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_SSL ssl.openssl.ssl-conf-cmd += ("CipherString" => "{{{join output.ciphers ":"}}}") - {{/if}} + {{/if}} # OCSP stapling (input file must be maintained by external script) # https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_SSL#OCSP-Stapling #ssl.stapling-file = "/path/to/cert-staple.der" @@ -55,30 +55,30 @@ ssl.openssl.ssl-conf-cmd += ("CipherString" => "{{{join output.ciphers ":"}}}") ssl.use-sslv2 = "disable" ssl.use-sslv3 = "disable" ssl.honor-cipher-order = "{{#if output.serverPreferredOrder}}enable{{else}}disable{{/if}}" - {{#if output.ciphers.length}} + {{#if output.ciphers.length}} ssl.cipher-list = "{{{join output.ciphers ":"}}}" - {{/if}} + {{/if}} {{/if}} {{else}} $SERVER["socket"] == ":443" { ssl.engine = "enable" - {{#if (minver "1.4.53" form.serverVersion)}} + {{#if (minver "1.4.53" form.serverVersion)}} ssl.privkey = "/path/to/private_key" ssl.pemfile = "/path/to/signed_cert" ssl.ca-file = "/path/to/intermediate_certificate" - {{else}} + {{else}} # pemfile is cert+privkey, ca-file is the intermediate chain in one file ssl.pemfile = "/path/to/signed_cert_plus_private_key" ssl.ca-file = "/path/to/intermediate_certificate" - {{/if}} -{{#if output.usesDhe}} - {{#if (minver "1.4.29" form.serverVersion)}} + {{/if}} + {{#if output.usesDhe}} + {{#if (minver "1.4.29" form.serverVersion)}} # {{output.dhCommand}} > /path/to/dhparam ssl.dh-file = "/path/to/dhparam" - {{/if}} -{{/if}} + {{/if}} + {{/if}} # {{form.config}} configuration {{#if (minver "1.4.48" form.serverVersion)}} |