|
@@ -20,6 +20,27 @@
|
20
|
20
|
- name: Enable NameVirtualHost for HTTPS
|
21
|
21
|
lineinfile: dest=/etc/apache2/ports.conf regexp='^ NameVirtualHost \*:443' insertafter='^<IfModule mod_ssl.c>' line=' NameVirtualHost *:443'
|
22
|
22
|
|
|
23
|
+- name: Enable Apache SOCACHE_SHMCB module for the SSL stapling cache
|
|
24
|
+ command: a2enmod socache_shmcb
|
|
25
|
+ creates=/etc/apache2/mods-enabled/socache_shmcb.load
|
|
26
|
+ notify: restart apache
|
|
27
|
+ when: ansible_distribution_release != 'wheezy'
|
|
28
|
+
|
|
29
|
+- name: Add Apache SSL stapling cache configuration
|
|
30
|
+ copy:
|
|
31
|
+ src=etc_apache2_conf-available_ssl-stapling-cache.conf
|
|
32
|
+ dest=/etc/apache2/conf-available/ssl-stapling-cache.conf
|
|
33
|
+ owner=root
|
|
34
|
+ group=root
|
|
35
|
+ when: ansible_distribution_release != 'wheezy'
|
|
36
|
+ notify: restart apache
|
|
37
|
+
|
|
38
|
+- name: Enable Apache SSL stapling cache configuration
|
|
39
|
+ command: a2enconf ssl-stapling-cache
|
|
40
|
+ creates=/etc/apache2/conf-enabled/ssl-stapling-cache.conf
|
|
41
|
+ when: ansible_distribution_release != 'wheezy'
|
|
42
|
+ notify: restart apache
|
|
43
|
+
|
23
|
44
|
- name: Add common Apache SSL config
|
24
|
45
|
template:
|
25
|
46
|
src=etc_apache2_ssl.conf.j2
|