# vim:ft=ansible:
apache_global_vhost_settings: |
  DirectoryIndex index.php index.html
  Protocols h2 http/1.1
  <FilesMatch \.php$>
  SetHandler "proxy:fcgi://127.0.0.1:9000"
  </FilesMatch>
apache_vhosts:
  # desu.ltd
  - servername: desu.ltd
    extra_parameters: |
      Redirect permanent / https://desu.ltd/
  - servername: git.desu.ltd
    extra_parameters: |
      Redirect permanent / https://git.desu.ltd/
  - servername: nc.desu.ltd
    extra_parameters: |
      Redirect permanent / https://nc.desu.ltd/
      # 9iron.club
  - servername: 9iron.club
    extra_parameters: |
      Redirect permanent / https://www.9iron.club/
  - servername: www.9iron.club
    extra_parameters: |
      Redirect permanent / https://www.9iron.club/
apache_vhosts_ssl:
  # desu.ltd
  - servername: desu.ltd
    documentroot: /var/www/desu.ltd
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
  - servername: git.desu.ltd
    extra_parameters: |
      ProxyPreserveHost On
      ProxyRequests Off
      ProxyPass / http://127.0.0.1:3000/ nocanon retry=1
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
  - servername: nc.desu.ltd
    extra_parameters: |
      Header always set Strict-Transport-Security "max-age=31536000"
    documentroot: /var/www/nc.desu.ltd
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
    # 9iron.club
  - servername: 9iron.club
    extra_parameters: |
      Redirect permanent / https://www.9iron.club/
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
  - servername: www.9iron.club
    documentroot: /var/www/www.9iron.club
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
    # otwstudios.org
  - servername: otwstudios.org
    extra_parameters: |
      Redirect permanent / https://www.otwstudios.org/
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem
  - servername: www.otwstudios.org
    documentroot: /var/www/www.otwstudios.org
    certificate_file: /etc/letsencrypt/live/desu.ltd/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/desu.ltd/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/desu.ltd/chain.pem