forked from Netz39_Admin/netz39-infra-ansible
31 lines
1.2 KiB
Text
31 lines
1.2 KiB
Text
|
<VirtualHost {{ ansible_default_ipv4.address }}:80 [{{ ansible_default_ipv6.address | default('::1') }}]:80>
|
||
|
|
ServerAdmin {{ server_admin }}
|
||
|
|
ServerName {{ site_name }}
|
||
|
|
ServerAlias {{ site_name }}
|
||
|
|
ErrorLog /var/log/apache2/{{ site_name }}-error.log
|
||
|
|
CustomLog /var/log/apache2/{{ site_name }}-access.log common
|
||
|
|
|
||
|
|
Alias /.well-known/acme-challenge /usr/local/etc/dehydrated/challenge
|
||
|
|
</VirtualHost>
|
||
|
|
|
||
|
|
<IfFile /usr/local/etc/dehydrated/certs/{{ site_name }}>
|
||
|
|
<VirtualHost {{ ansible_default_ipv4.address }}:443 [{{ ansible_default_ipv6.address | default('::1') }}]:80>
|
||
|
|
ServerAdmin {{ server_admin }}
|
||
|
|
ServerName {{ site_name }}
|
||
|
|
ServerAlias {{ site_name }}
|
||
|
|
|
||
|
|
ErrorLog /var/log/apache2/{{ site_name }}-error.log
|
||
|
|
CustomLog /var/log/apache2/{{ site_name }}-access.log common
|
||
|
|
|
||
|
|
SSLEngine on
|
||
|
|
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
|
||
|
|
SSLCertificateFile /usr/local/etc/dehydrated/certs/{{ site_name }}/cert.pem
|
||
|
|
SSLCertificateKeyFile /usr/local/etc/dehydrated/certs/{{ site_name }}/privkey.pem
|
||
|
|
SSLCertificateChainFile /usr/local/etc/dehydrated/certs/{{ site_name }}/chain.pem
|
||
|
|
|
||
|
|
Alias /.well-known/acme-challenge /usr/local/etc/dehydrated/challenge
|
||
|
|
|
||
|
|
Redirect 404 /
|
||
|
|
</VirtualHost>
|
||
|
|
</IfFile>
|