# Ansible
<IfModule mod_ssl.c>
<VirtualHost *:443>
  ServerAdmin root@trygvis.io
  ServerName {{ item.hostname }}.trygvis.io

  LogLevel warn
  ErrorLog ${APACHE_LOG_DIR}/{{ item.hostname }}.trygvis.io-error.log
  CustomLog ${APACHE_LOG_DIR}/{{ item.hostname }}.trygvis.io-access.log combined

  DocumentRoot /var/www/{{ item.hostname }}.trygvis.io/htdocs
  <Directory />
    Options FollowSymLinks
    AllowOverride None
  </Directory>
  <Directory /var/www/{{ item.hostname }}.trygvis.io/htdocs/>
    Options Indexes FollowSymLinks MultiViews
    AllowOverride None
    Order allow,deny
    allow from all
  </Directory>

  ProxyTimeout 600
  ProxyPreserveHost On
  ProxyPass / http://{{ lxc_containers[item.backend].ipv4.address }}:5000/

  SSLCertificateFile /etc/letsencrypt/live/{{ item.hostname }}.trygvis.io/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/{{ item.hostname }}.trygvis.io/privkey.pem
  Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>