openstack-ansible-rabbitmq_.../templates/rabbitmq.config.j2
Andrey 84d75078cf Allow configuration of listening on non-ssl port
Deployers can override the `rabbitmq_disable_non_tls_listeners`
variable, setting a value of `True` if they wish to enable this feature.

Change-Id: I4fe39099dbe8973d2655845c19882c404d4f20b1
2017-01-19 15:23:13 -05:00

20 lines
953 B
Django/Jinja

[
{rabbit, [
{loopback_users, []},
{% if rabbitmq_disable_non_tls_listeners %}{tcp_listeners,[]},{% endif %}
{ssl_listeners, [5671]},
{collect_statistics_interval, {{ rabbitmq_collect_statistics_interval }} },
{ssl_options, [{certfile,"{{ rabbitmq_ssl_cert }}"},
{keyfile,"{{ rabbitmq_ssl_key }}"},
{% if rabbitmq_user_ssl_ca_cert is defined -%}
{cacertfile,"{{ rabbitmq_ssl_ca_cert }}"},
{% endif -%}
{versions, ['tlsv1.2', 'tlsv1.1']},
{verify,verify_none},
{fail_if_no_peer_cert,false}]}
{% if rabbitmq_cluster_partition_handling != 'ignore' %},{cluster_partition_handling, {{ rabbitmq_cluster_partition_handling }}}{% endif %}
{% if rabbitmq_hipe_compile | bool %},{hipe_compile, true}{% endif %}
]},
{rabbitmq_management, [{rates_mode, {{ rabbitmq_management_rates_mode }} }] }
].