ansible/roles/gitweb/templates/apache2-vhost-ssl.conf
2020-10-18 23:23:00 -05:00

34 lines
981 B
ApacheConf

# Configuration for {{ gitweb_url }}
# vim:ft=apache:
# Accept connections from non-SNI clients
SSLStrictSNIVHostCheck off
# Website configuration
<VirtualHost *:80>
ServerName {{ gitweb_url }}
Redirect permanent / https://{{ gitweb_url }}
</VirtualHost>
<VirtualHost *:443>
SSLEngine on
SSLCertificateFile /etc/pki/cert/crt/{{ gitweb_url }}.crt
SSLCertificateKeyFile /etc/pki/cert/private/{{ gitweb_url }}.key
SSLCertificateChainFile /etc/pki/cert/crt/{{ gitweb_url}}-fullchain.crt
SSLProtocol {{ ssl_protocol }}
SSLCipherSuite {{ ssl_cipher_suite }}
<FilesMatch "\.(cgi|shtml|phtml|php)$">\
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
ServerName {{ gitweb_url }}
DocumentRoot {{ gitweb_webroot }}
<Directory "{{ gitweb_webroot }}">
Require all granted
AllowOverride All
Options MultiViews FollowSymlinks
</Directory>
IncludeOptional /etc/apache2/includes/{{ gitweb_url }}.conf
</VirtualHost>