# vim:ft=ansible:
apache_global_vhost_settings: |
  DirectoryIndex index.php index.html
  Protocols h2 http/1.1
  <FilesMatch \.php$>
  SetHandler "proxy:fcgi://127.0.0.1:9000"
  </FilesMatch>
apache_vhosts:
  # desu.ltd
  - servername: desu.ltd
    extra_parameters: |
      Redirect permanent / https://desu.ltd/
  - servername: git.desu.ltd
    extra_parameters: |
      Redirect permanent / https://git.desu.ltd/
  - servername: nc.desu.ltd
    extra_parameters: |
      Redirect permanent / https://nc.desu.ltd/
  # 9iron.club
  - servername: www.9iron.club
    extra_parameters: |
      Redirect permanent / https://9iron.club/
  - servername: srv.9iron.club
    extra_parameters: |
      Redirect permanent / https://srv.9iron.club/
apache_vhosts_ssl:
  # desu.ltd
  - servername: desu.ltd
    extra_parameters: |
      ProxyPreserveHost On
      ProxyRequests Off
      ProxyPass / http://127.0.0.1:8002/ nocanon retry=1
    certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
  - servername: git.desu.ltd
    extra_parameters: |
      ProxyPreserveHost On
      ProxyRequests Off
      ProxyPass / http://127.0.0.1:3000/ nocanon retry=1
    certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
  - servername: nc.desu.ltd
    extra_parameters: |
      Header always set Strict-Transport-Security "max-age=31536000"
    documentroot: /var/www/nc.desu.ltd
    certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
  # 9iron.club
  - servername: www.9iron.club
    extra_parameters: |
      Redirect permanent / https://9iron.club/
    certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
  - servername: 9iron.club
    extra_parameters: |
      ProxyPreserveHost On
      ProxyRequests Off
      ProxyPass / http://127.0.0.1:8001/ nocanon retry=1
    certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
  - servername: srv.9iron.club
    extra_parameters: |
      <Directory /var/www/srv.9iron.club>
        Options +Indexes
      </Directory>
    documentroot: /var/www/srv.9iron.club
    certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
    certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
    certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem