sovereign/roles/iot/templates/etc_apache2_sites-available...

<VirtualHost *:80>
    ServerName {{ grafana_subdomain }}.{{ item.name }}
    ServerAlias {{ grafana_subdomain }}

    Redirect temp / https://{{ grafana_subdomain }}.{{ item.name }}/
</VirtualHost>

<VirtualHost *:443>
    ServerName {{ grafana_subdomain }}.{{ item.name }}
    ServerAlias {{ grafana_subdomain }}

    SSLEngine               On
    DocumentRoot            "{{ item.doc_root }}"
    DirectoryIndex          index.html
    Options                 -Indexes
    HostnameLookups         Off
    LogLevel                warn
    ErrorLog                /var/log/apache2/grafana.info-error_log
    CustomLog               /var/log/apache2/grafana.info-access_log common

    Alias                   /mqtt /var/www/mqtt-admin
    ProxyPassMatch          ^/mqtt !

    ProxyRequests           Off
    ProxyPreserveHost       On
    ProxyPass               / http://localhost:{{ grafana_internal_port }}/
    ProxyPassReverse        / http://localhost:{{ grafana_internal_port }}/
</VirtualHost>