# vim:ft=ansible:
apache_global_vhost_settings: |
  DirectoryIndex index.php index.html
  Protocols h2 http/1.1
  <FilesMatch \.php$>
  SetHandler "proxy:fcgi://127.0.0.1:9000"
  </FilesMatch>
apache_vhosts:
  - servername: nc.9iron.club
    extra_parameters: |
      Redirect permanent / https://nc.9iron.club/
  - servername: git.9iron.club
    extra_parameters: |
      Redirect permanent / https://git.9iron.club/
apache_vhosts_ssl:
  - servername: git.9iron.club
    extra_parameters: |
      ProxyPreserveHost On
      ProxyRequests Off
      ProxyPass / http://127.0.0.1:3000/ nocanon retry=1
    certificate_file: /etc/letsencrypt/live/nc.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/nc.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/nc.9iron.club/chain.pem
  - servername: nc.9iron.club
    extra_parameters: |
      Header always set Strict-Transport-Security "max-age=31536000"
    documentroot: /var/www/nextcloud
    certificate_file: /etc/letsencrypt/live/nc.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/nc.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/nc.9iron.club/chain.pem