ansible/roles/matrix/templates/apache2-vhost-ssl.conf

33 lines
1020 B
Plaintext
Raw Normal View History

# Configuration for {{ matrix_url }}
# vim:ft=apache:
# Accept connections from non-SNI clients
SSLStrictSNIVHostCheck off
# Need this for SSL proxying, apparently
SSLProxyEngine on
# Website configuration
<VirtualHost *:80>
ServerName {{ matrix_url }}
Redirect permanent / https://{{ matrix_url }}
</VirtualHost>
2020-06-22 05:34:01 -05:00
<VirtualHost *:443 *:8448>
SSLEngine on
SSLCertificateFile /etc/pki/cert/crt/{{ matrix_url }}.crt
SSLCertificateKeyFile /etc/pki/cert/private/{{ matrix_url }}.key
SSLCertificateChainFile /etc/pki/cert/crt/{{ matrix_url }}-fullchain.crt
SSLProtocol {{ ssl_protocol }}
SSLCipherSuite {{ ssl_cipher_suite }}
ServerName {{ matrix_url }}
ServerAlias {{ matrix_server_name }}
DocumentRoot {{ matrix_webroot }}
<Directory "{{ matrix_webroot }}">
Require all granted
AllowOverride All
Options MultiViews FollowSymlinks
</Directory>
2020-06-22 05:34:01 -05:00
AllowEncodedSlashes NoDecode
2020-06-22 06:31:58 -05:00
ProxyPass /_matrix http://127.0.0.1:8008/_matrix nocanon
ProxyPassReverse /_matrix https://127.0.0.1:8008/_matrix
</VirtualHost>