From c5dac00a36342ba2742ade0a0208f763108cd267 Mon Sep 17 00:00:00 2001
From: Stefan Haun <tux@netz39.de>
Date: Sat, 12 Dec 2020 16:26:12 +0100
Subject: [PATCH] Enable HTTPS sites only when cert exists

---
 .../templates/apache-docker-forward-site.j2                     | 2 ++
 .../setup-http-site-proxy/templates/apache-docker-proxy-site.j2 | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2 b/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2
index 680d073..3052227 100644
--- a/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2
+++ b/roles/setup-http-site-forward/templates/apache-docker-forward-site.j2
@@ -14,6 +14,7 @@
     </ifmodule>
 </VirtualHost>
 
+<IfFile /usr/local/etc/dehydrated/certs/{{ site_name }}>
 <VirtualHost {{ ansible_default_ipv4.address }}:443 [{{ ansible_default_ipv6.address }}]:80>
     ServerAdmin {{ server_admin }}
     ServerName {{ site_name }}
@@ -36,3 +37,4 @@
         RewriteRule (.*) {{forward_to}} [R=301,L]
     </ifmodule>
 </VirtualHost>
+</IfFile>
diff --git a/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2 b/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2
index 885b905..18ab71e 100644
--- a/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2
+++ b/roles/setup-http-site-proxy/templates/apache-docker-proxy-site.j2
@@ -14,6 +14,7 @@
     </ifmodule>
 </VirtualHost>
 
+<IfFile /usr/local/etc/dehydrated/certs/{{ site_name }}>
 <VirtualHost {{ ansible_default_ipv4.address }}:443 [{{ ansible_default_ipv6.address }}]:443>
     ServerAdmin {{ server_admin }}
     ServerName {{ site_name }}
@@ -30,3 +31,4 @@
 
     ProxyPass / http://localhost:{{proxy_port}}/
 </VirtualHost>
+</IfFile>