Separate out our proxy from our frontend

roles/gitea/templates/apache2-vhost-ssl.conf

@@ -25,6 +25,18 @@ SSLProxyEngine on
 		AllowOverride All
 		Options MultiViews FollowSymlinks
 	</Directory>
+
+	RequestHeader set X_FORWARDED_PROTO 'https'
+	RequestHeader set X-Forwarded-Ssl on
+</VirtualHost>
+<VirtualHost *:8448>
+	SSLEngine on
+	SSLCertificateFile /etc/pki/cert/crt/{{ gitea_url }}.crt
+	SSLCertificateKeyFile /etc/pki/cert/private/{{ gitea_url }}.key
+	SSLCertificateChainFile /etc/pki/cert/crt/{{ gitea_url }}-fullchain.crt
+	SSLProtocol {{ ssl_protocol }}
+	SSLCipherSuite {{ ssl_cipher_suite }}
+	ServerName {{ gitea_url }}
 	ProxyPreserveHost On
 	ProxyRequests Off
 	ProxyPass / http://127.0.0.1:3000/ nocanon retry=1

roles/matrix/tasks/main.yml

@@ -19,6 +19,10 @@
           apt:
             name:
               - "matrix-synapse-py3"
+    - name: Set up MySQL
+      block:
+        - name: Create DB
+
     - name: Set up Apache
       block:
         - name: Enable modules