21 lines
565 B
Django/Jinja
21 lines
565 B
Django/Jinja
<VirtualHost *:443>
|
|
ServerName {{ inventory_hostname }}
|
|
DocumentRoot /srv/web/{{ inventory_hostname }}
|
|
|
|
Protocols h2 http/1.1
|
|
SSLEngine on
|
|
|
|
# Server certificates
|
|
SSLCertificateKeyFile {{ tls_private }}/{{ inventory_hostname }}.key
|
|
SSLCertificateFile {{ tls_certs }}/{{ inventory_hostname }}.crt
|
|
|
|
# Client certificate auth
|
|
SSLCACertificateFile {{ tls_certs }}/ca.crt
|
|
SSLVerifyClient require
|
|
|
|
<Directory "/srv/web/{{ inventory_hostname }}">
|
|
Options FollowSymLinks
|
|
AllowOverride None
|
|
Require all granted
|
|
</Directory>
|
|
</VirtualHost>
|