Browse Source

Remove unneeded/deprecated apache configuration

Dosenpfand 8 years ago
parent
commit
f2c14dd911

+ 0
- 7
roles/common/tasks/ssl.yml View File

@@ -6,13 +6,6 @@
6 6
   command: a2enmod ssl creates=/etc/apache2/mods-enabled/ssl.load
7 7
   notify: restart apache
8 8
 
9
-- name: Enable NameVirtualHost for HTTPS
10
-  lineinfile:
11
-    dest=/etc/apache2/ports.conf regexp='^    NameVirtualHost \*:443'
12
-    insertafter='^<IfModule mod_ssl.c>'
13
-    line='    NameVirtualHost *:443'
14
-  notify: restart apache
15
-
16 9
 - name: Enable Apache SOCACHE_SHMCB module for the SSL stapling cache
17 10
   command: a2enmod socache_shmcb
18 11
     creates=/etc/apache2/mods-enabled/socache_shmcb.load

+ 0
- 1
roles/common/templates/etc_apache2_conf-available_ssl.conf.j2 View File

@@ -8,7 +8,6 @@ SSLStaplingReturnResponderErrors off
8 8
 
9 9
 SSLCertificateKeyFile	/etc/letsencrypt/live/{{ domain }}/privkey.pem
10 10
 SSLCertificateFile	/etc/letsencrypt/live/{{ domain }}/fullchain.pem
11
-SSLCertificateChainFile	/etc/letsencrypt/live/{{ domain }}/chain.pem
12 11
 
13 12
 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
14 13
 

Loading…
Cancel
Save