12345678910111213141516171819202122232425262728293031 |
- <VirtualHost *:80>
- ServerName {{ domain }}
- ServerAlias www.{{ domain }}
-
- Redirect permanent / https://www.{{ domain }}/
- </VirtualHost>
-
-
- <VirtualHost *:443>
- ServerName {{ domain }}
- ServerAlias www.{{ domain }}
-
- SSLEngine on
- SSLProtocol ALL -SSLv2
- SSLHonorCipherOrder On
- SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
- SSLCertificateFile /etc/ssl/certs/wildcard_public_cert.crt
- SSLCertificateKeyFile /etc/ssl/private/wildcard_private.key
- SSLCACertificateFile /etc/ssl/certs/wildcard_ca.pem
- Header add Strict-Transport-Security "max-age=15768000; includeSubdomains"
-
- DocumentRoot "/var/www/{{ domain }}"
- DirectoryIndex index.html
- Options -Indexes
-
- HostnameLookups Off
-
- RewriteEngine on
- RewriteCond %{HTTP_HOST} !^www\. [NC]
- RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
- </VirtualHost>
|