Ver código fonte

Remove unneeded/deprecated apache configuration

Dosenpfand 8 anos atrás
pai
commit
f2c14dd911

+ 0
- 7
roles/common/tasks/ssl.yml Ver arquivo

6
   command: a2enmod ssl creates=/etc/apache2/mods-enabled/ssl.load
6
   command: a2enmod ssl creates=/etc/apache2/mods-enabled/ssl.load
7
   notify: restart apache
7
   notify: restart apache
8
 
8
 
9
-- name: Enable NameVirtualHost for HTTPS
10
-  lineinfile:
11
-    dest=/etc/apache2/ports.conf regexp='^    NameVirtualHost \*:443'
12
-    insertafter='^<IfModule mod_ssl.c>'
13
-    line='    NameVirtualHost *:443'
14
-  notify: restart apache
15
-
16
 - name: Enable Apache SOCACHE_SHMCB module for the SSL stapling cache
9
 - name: Enable Apache SOCACHE_SHMCB module for the SSL stapling cache
17
   command: a2enmod socache_shmcb
10
   command: a2enmod socache_shmcb
18
     creates=/etc/apache2/mods-enabled/socache_shmcb.load
11
     creates=/etc/apache2/mods-enabled/socache_shmcb.load

+ 0
- 1
roles/common/templates/etc_apache2_conf-available_ssl.conf.j2 Ver arquivo

8
 
8
 
9
 SSLCertificateKeyFile	/etc/letsencrypt/live/{{ domain }}/privkey.pem
9
 SSLCertificateKeyFile	/etc/letsencrypt/live/{{ domain }}/privkey.pem
10
 SSLCertificateFile	/etc/letsencrypt/live/{{ domain }}/fullchain.pem
10
 SSLCertificateFile	/etc/letsencrypt/live/{{ domain }}/fullchain.pem
11
-SSLCertificateChainFile	/etc/letsencrypt/live/{{ domain }}/chain.pem
12
 
11
 
13
 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
12
 SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
14
 
13
 

Carregando…
Cancelar
Salvar