SSL front-end proxy nginx configuration for OpenStack

gistfile1.txt

ssl_certificate /etc/ssl/certs/z400cert.pem;
ssl_certificate_key /etc/ssl/private/z400key.pem;

# Keystone

server {
        listen 192.168.1.2:5000;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:5000/;
        }
}

server {
        listen 192.168.1.2:35357;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:35357/;
        }
}

# Nova

server {
        listen 192.168.1.2:8774;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:8774/;
        }
}

# Cinder

server {
        listen 192.168.1.2:8776;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:8776/;
        }
}

# Neutron

server {
        listen 192.168.1.2:9696;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:9696/;
        }
}

server {
        listen 192.168.1.2:9292;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:9292/;
        }
}

# NoVNC proxy

server {
        listen 192.168.1.2:6080;
        ssl on;
        location / {
                include /etc/nginx/proxy_params;
                proxy_pass http://127.0.0.1:6080/;
        }
}