From b3b09d1dacb1abce5ddbf894f99c4f10d81df8c8 Mon Sep 17 00:00:00 2001
From: cugniere <16650011+Cugniere@users.noreply.github.com>
Date: Fri, 7 Jul 2023 09:19:27 +0200
Subject: [PATCH] update: ajoute le support de https sur le site de monitorign

---
 README.md                       | 2 +-
 roles/bootstrap/tasks/main.yaml | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index cc5f687b..cf23eb10 100644
--- a/README.md
+++ b/README.md
@@ -54,7 +54,7 @@ This will disable SSH connection to the server using password. This step will no
 - set `PasswordAuthentication no` 
 - set `ChallengeResponseAuthentication no`
 
-It is advised to run this command on a newly installed and if you understand the implication of those parameters. Your hosting service should provide you with an emergency access if you get locked out of the server.
+It is advised to run this command on a newly installed server, while keeping an active ssh connection in parallel and only if you understand the implication of those parameters. Your hosting service should provide you with an emergency access if you get locked out of the server.
 
 ### Listing required DNS record
 
diff --git a/roles/bootstrap/tasks/main.yaml b/roles/bootstrap/tasks/main.yaml
index a1fc218c..0fd36cde 100644
--- a/roles/bootstrap/tasks/main.yaml
+++ b/roles/bootstrap/tasks/main.yaml
@@ -42,6 +42,7 @@
   vars:
     service_domain: monitor.{{ fullname }}
     upstream_name: monitor
+    https: true
 - name: Provision tasks
   ansible.builtin.include_tasks: nginx_application_sites.yaml
   with_items: "{{ applications }}"