Update ssl setting (#99)

Signed-off-by: Prudhvi Godithi <[email protected]>
opensearch-project · Nov 7, 2024 · 1e94fe4 · 1e94fe4
1 parent 3ff83cd
commit 1e94fe4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/infrastructure/lib/constructs/opensearchNginxProxyCognito.ts b/infrastructure/lib/constructs/opensearchNginxProxyCognito.ts
@@ -176,12 +176,11 @@ export class OpenSearchMetricsNginxCognito extends Construct {
             resolver 10.0.0.2 ipv6=off;
             
             server {
-                listen 443;
+                listen 443 ssl;
                 server_name $host;
                 rewrite ^/$ https://$host/_dashboards redirect;
                 ssl_certificate /etc/nginx/cert.crt;
                 ssl_certificate_key /etc/nginx/cert.key;
-                ssl on;
                 ssl_session_cache builtin:1000 shared:SSL:10m;
                 ssl_protocols TLSv1.2 TLSv1.3;
                 ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;

diff --git a/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts b/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts
@@ -162,12 +162,11 @@ export class OpenSearchMetricsNginxReadonly extends Stack {
             resolver 10.0.0.2 ipv6=off;
             
             server {
-                listen 443;
+                listen 443 ssl;
                 server_name $host;
                 rewrite ^/$ https://$host/_dashboards redirect;
                 ssl_certificate /etc/nginx/cert.crt;
                 ssl_certificate_key /etc/nginx/cert.key;
-                ssl on;
                 ssl_session_cache builtin:1000 shared:SSL:10m;
                 ssl_protocols TLSv1.2 TLSv1.3;
                 ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;