ansible/playbooks/vars/desultd-apache.yml

75 lines
3.0 KiB
YAML

# vim:ft=ansible:
apache_global_vhost_settings: |
DirectoryIndex index.php index.html
Protocols h2 http/1.1
<FilesMatch \.php$>
SetHandler "proxy:fcgi://127.0.0.1:9000"
</FilesMatch>
apache_vhosts:
# desu.ltd
- servername: desu.ltd
extra_parameters: |
Redirect permanent / https://desu.ltd/
- servername: git.desu.ltd
extra_parameters: |
Redirect permanent / https://git.desu.ltd/
- servername: nc.desu.ltd
extra_parameters: |
Redirect permanent / https://nc.desu.ltd/
# 9iron.club
- servername: www.9iron.club
extra_parameters: |
Redirect permanent / https://9iron.club/
- servername: srv.9iron.club
extra_parameters: |
Redirect permanent / https://srv.9iron.club/
apache_vhosts_ssl:
# desu.ltd
- servername: desu.ltd
extra_parameters: |
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://127.0.0.1:8002/ nocanon retry=1
certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
- servername: git.desu.ltd
extra_parameters: |
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://127.0.0.1:3000/ nocanon retry=1
certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
- servername: nc.desu.ltd
extra_parameters: |
Header always set Strict-Transport-Security "max-age=31536000"
documentroot: /var/www/nc.desu.ltd
certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
# 9iron.club
- servername: www.9iron.club
extra_parameters: |
Redirect permanent / https://9iron.club/
certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
- servername: 9iron.club
extra_parameters: |
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://127.0.0.1:8001/ nocanon retry=1
certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem
- servername: srv.9iron.club
extra_parameters: |
<Directory /var/www/srv.9iron.club>
Options +Indexes
</Directory>
documentroot: /var/www/srv.9iron.club
certificate_file: /etc/letsencrypt/live/srv.9iron.club/fullchain.pem
certificate_key_file: /etc/letsencrypt/live/srv.9iron.club/privkey.pem
certificate_chain_file: /etc/letsencrypt/live/srv.9iron.club/chain.pem