aboutsummaryrefslogtreecommitdiff
path: root/ansible/roles
diff options
context:
space:
mode:
Diffstat (limited to 'ansible/roles')
-rw-r--r--ansible/roles/mw-frontend/files/etc/apache2/sites-available/mw.trygvis.io-ssl.conf29
-rw-r--r--ansible/roles/mw-frontend/tasks/main.yml5
2 files changed, 31 insertions, 3 deletions
diff --git a/ansible/roles/mw-frontend/files/etc/apache2/sites-available/mw.trygvis.io-ssl.conf b/ansible/roles/mw-frontend/files/etc/apache2/sites-available/mw.trygvis.io-ssl.conf
new file mode 100644
index 0000000..6260e2e
--- /dev/null
+++ b/ansible/roles/mw-frontend/files/etc/apache2/sites-available/mw.trygvis.io-ssl.conf
@@ -0,0 +1,29 @@
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
+ ServerAdmin root@trygvis.io
+ ServerName mw.trygvis.io
+
+ LogLevel warn
+ ErrorLog ${APACHE_LOG_DIR}/mw.trygvis.io-error.log
+ CustomLog ${APACHE_LOG_DIR}/mw.trygvis.io-access.log combined
+
+ DocumentRoot /var/www/mw.trygvis.io/htdocs
+ <Directory />
+ Options FollowSymLinks
+ AllowOverride None
+ </Directory>
+ <Directory /var/www/mw.trygvis.io/htdocs/>
+ Options Indexes FollowSymLinks MultiViews
+ AllowOverride None
+ Order allow,deny
+ allow from all
+ </Directory>
+
+ ProxyPreserveHost On
+ ProxyPass / http://conflatorio.vpn.trygvis.io:8080/
+
+ SSLCertificateFile /etc/letsencrypt/live/mw.trygvis.io/fullchain.pem
+ SSLCertificateKeyFile /etc/letsencrypt/live/mw.trygvis.io/privkey.pem
+ Include /etc/letsencrypt/options-ssl-apache.conf
+</VirtualHost>
+</IfModule>
diff --git a/ansible/roles/mw-frontend/tasks/main.yml b/ansible/roles/mw-frontend/tasks/main.yml
index 9c667d1..b7bb13f 100644
--- a/ansible/roles/mw-frontend/tasks/main.yml
+++ b/ansible/roles/mw-frontend/tasks/main.yml
@@ -1,6 +1,5 @@
---
- name: apache config
copy:
- dest: /etc/apache/sites-enabled/mw.trygvis.io.conf
- content: |
- woop!
+ src: etc/apache2/sites-available/mw.trygvis.io-ssl.conf
+ dest: /etc/apache2/sites-available/mw.trygvis.io-ssl.conf