Timo Makinen
bace8a39b4
Removed all RedHat default settings and just added Mozilla recommended modern settings.
15 lines
425 B
Django/Jinja
15 lines
425 B
Django/Jinja
<VirtualHost *:443>
|
|
ServerName {{ inventory_hostname }}
|
|
DocumentRoot /srv/web/{{ inventory_hostname }}
|
|
|
|
Protocols h2 http/1.1
|
|
SSLEngine on
|
|
|
|
# Server certificates
|
|
SSLCertificateKeyFile {{ tls_private }}/{{ inventory_hostname }}.key
|
|
SSLCertificateFile {{ tls_certs }}/{{ inventory_hostname }}.crt
|
|
|
|
# Client certificate auth
|
|
SSLCACertificateFile {{ tls_certs }}/ca.crt
|
|
SSLVerifyClient require
|
|
</VirtualHost>
|