ansible/roles/nextcloud/templates/apache2-vhost-ssl.conf

36 lines
1.0 KiB
Plaintext
Raw Normal View History

# Configuration for {{ nextcloud_url }}
# vim:ft=apache:
# Accept connections from non-SNI clients
SSLStrictSNIVHostCheck off
# Website configuration
<VirtualHost *:80>
ServerName {{ nextcloud_url }}
2020-02-06 03:22:38 -06:00
Redirect permanent / https://{{ nextcloud_url }}
</VirtualHost>
<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/pki/cert/crt/{{ nextcloud_url }}.crt
SSLCertificateKeyFile /etc/pki/cert/private/{{ nextcloud_url }}.key
2020-02-06 14:14:56 -06:00
SSLCertificateChainFile /etc/pki/cert/crt/{{ nextcloud_url}}-fullchain.crt
SSLProtocol {{ ssl_protocol }}
2020-06-03 06:07:11 -05:00
SSLCipherSuite {{ ssl_cipher_suite }}
<FilesMatch "\.(cgi|shtml|phtml|php)$">\
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
ServerName {{ nextcloud_url }}
DocumentRoot {{ nextcloud_webroot }}
2020-02-06 00:01:26 -06:00
<Directory "{{ nextcloud_webroot }}">
Require all granted
AllowOverride All
Options MultiViews FollowSymlinks
</Directory>
2020-02-06 03:22:38 -06:00
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
</IfModule>
</VirtualHost>