I've switched to using nginx+unicorn, and haven't had any issues. The only hassle for me is that I'm running it under Ubuntu, and unicorn isn't (yet) packaged by Debian/Ubuntu, so I had to install it via gems and don't have the advantage of automated updates.
On Thu, 23 Sep 2010 07:40:21 -0700 (PDT) Jakub Heichman <kuba.heich...@gmail.com> wrote: > On 29 June, 19:44, Dan Urist <dur...@ucar.edu> wrote: > > I have this in my puppet.conf: > > > > [puppetmasterd] > > ssl_client_header = SSL_CLIENT_S_DN > > ssl_client_verify_header = SSL_CLIENT_VERIFY > > [..] > > proxy_set_header Host $host; > > proxy_set_header X-Real-IP $remote_addr; > > proxy_set_header X-Forwarded-For > > Hi Dan, > > I had the same problem, it looks like 'proxy_set_header' option will > not have any effect with Passenger module. > I had to install Passenger 3 (beta) and use 'passenger_set_cgi_param' > options instead. > > This seems to work for me: > > nginx.conf: > passenger_set_cgi_param HTTP_X_CLIENT_DN $ssl_client_s_dn; > passenger_set_cgi_param HTTP_X_CLIENT_VERIFY $ssl_client_verify; > > [puppetmasterd] > ssl_client_header = HTTP_X_CLIENT_DN > ssl_client_verify_header = HTTP_X_CLIENT_VERIFY > > Kind regards, > Jakub > > -- Dan Urist dur...@ucar.edu 303-497-2459 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
