Timo Makinen
dd2b5c6a69
CentOS 7 doesn't support Protocols definition at all. Also as we are running Apache only behind proxies all requests are HTTP/1.1 anyway.
20 lines
541 B
Django/Jinja
20 lines
541 B
Django/Jinja
<VirtualHost *:443>
|
|
ServerName {{ inventory_hostname }}
|
|
DocumentRoot /srv/web/{{ inventory_hostname }}
|
|
|
|
SSLEngine on
|
|
|
|
# Server certificates
|
|
SSLCertificateKeyFile {{ tls_private }}/{{ inventory_hostname }}.key
|
|
SSLCertificateFile {{ tls_certs }}/{{ inventory_hostname }}.crt
|
|
|
|
# Client certificate auth
|
|
SSLCACertificateFile {{ tls_certs }}/ca.crt
|
|
SSLVerifyClient require
|
|
|
|
<Directory "/srv/web/{{ inventory_hostname }}">
|
|
Options FollowSymLinks
|
|
AllowOverride None
|
|
Require all granted
|
|
</Directory>
|
|
</VirtualHost>
|