33 lines
1020 B
ApacheConf
33 lines
1020 B
ApacheConf
# Configuration for {{ matrix.url }}
|
|
# vim:ft=apache:
|
|
|
|
# Accept connections from non-SNI clients
|
|
SSLStrictSNIVHostCheck off
|
|
# Need this for SSL proxying, apparently
|
|
SSLProxyEngine on
|
|
|
|
# Website configuration
|
|
<VirtualHost *:80>
|
|
ServerName {{ matrix.url }}
|
|
Redirect permanent / https://{{ matrix.url }}
|
|
</VirtualHost>
|
|
<VirtualHost *:443 *:8448>
|
|
SSLEngine on
|
|
SSLCertificateFile /etc/pki/cert/crt/{{ matrix.url }}.crt
|
|
SSLCertificateKeyFile /etc/pki/cert/private/{{ matrix.url }}.key
|
|
SSLCertificateChainFile /etc/pki/cert/crt/{{ matrix.url }}-fullchain.crt
|
|
SSLProtocol {{ ssl_protocol }}
|
|
SSLCipherSuite {{ ssl_cipher_suite }}
|
|
ServerName {{ matrix.url }}
|
|
ServerAlias {{ matrix.server_name }}
|
|
DocumentRoot {{ matrix_webroot }}
|
|
<Directory "{{ matrix_webroot }}">
|
|
Require all granted
|
|
AllowOverride All
|
|
Options MultiViews FollowSymlinks
|
|
</Directory>
|
|
AllowEncodedSlashes NoDecode
|
|
ProxyPass /_matrix http://127.0.0.1:8008/_matrix nocanon
|
|
ProxyPassReverse /_matrix https://127.0.0.1:8008/_matrix
|
|
</VirtualHost>
|