# vim:ft=ansible:
apache_global_vhost_settings: |
  DirectoryIndex index.php index.html
  Protocols h2 http/1.1
apache_vhosts:
  - servername: cowfee.moe
    extra_parameters: |
      Redirect permanent / https://cowfee.moe/
apache_vhosts_ssl:
  - servername: cowfee.moe
    extra_parameters: |
      ProxyPreserveHost On
      ProxyRequests Off
      ProxyPass / http://127.0.0.1:4000/ nocanon retry=1
      ProxyPassReverse / https://127.0.0.1:4000/
      RequestHeader set X_FORWARDED_PROTO 'https'
      RequestHeader set X-Forwarded-Ssl on
    certificate_file: /etc/letsencrypt/live/cowfee.moe/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/cowfee.moe/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/cowfee.moe/chain.pem