#
# Managed by Puppet
#
webserver: {
    access-log-config: /etc/puppetlabs/puppetserver/request-logging.xml
    client-auth: want
    ssl-host: 0.0.0.0
    ssl-port: 8140
    ssl-cert: /etc/puppetlabs/puppet/ssl/certs/pipe-katello-server-nightly-centos7.tanso.example.com.pem
    ssl-key: /etc/puppetlabs/puppet/ssl/private_keys/pipe-katello-server-nightly-centos7.tanso.example.com.pem
    ssl-ca-cert: /etc/puppetlabs/puppetserver/ca/ca_crt.pem
    ssl-crl-path: /etc/puppetlabs/puppetserver/ca/ca_crl.pem
    ssl-cert-chain: /etc/puppetlabs/puppetserver/ca/ca_crt.pem
    idle-timeout-milliseconds: 30000
    ssl-protocols: [
        TLSv1.2,
    ]
    cipher-suites: [
        TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
        TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
        TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
        TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
    ]
}
