sovereign/roles/gpodder/templates/etc_apache2_sites-available...

<VirtualHost *:80>
    ServerName {{ gpodder_subdomain }}.{{ item.name }}

    Redirect temp / https://{{ gpodder_subdomain }}.{{ item.name }}/
</VirtualHost>

<VirtualHost *:443>
    ServerName {{ gpodder_subdomain }}.{{ item.name }}

    SSLEngine               On
    DocumentRoot            "{{ item.doc_root }}"
    DirectoryIndex          index.html
    Options                 -Indexes
    HostnameLookups         Off
    LogLevel                warn
    ErrorLog                /var/log/apache2/gpodder.info-error_log
    CustomLog               /var/log/apache2/gpodder.info-access_log common

    ProxyRequests           Off
    ProxyPreserveHost       On

    <Directory /home/gpodder/gpodder/static>
        AllowOverride None
        Require all granted
    </Directory>

    Alias                   /static /home/gpodder/gpodder/static
    ProxyPassMatch          ^/static !

    Alias                   /favicon.ico /home/gpodder/gpodder/static/favicon.ico
    ProxyPassMatch          ^/favicon.ico !

    Alias                   /favicon.png /home/gpodder/gpodder/static/favicon.png
    ProxyPassMatch          ^/favicon.png !

    <Directory /data/gpodder>
        AllowOverride None
        Require all granted
    </Directory>

    Alias                   /media /data/gpodder
    ProxyPassMatch          ^/media !

    ProxyPass               / http://localhost:{{ gpodder_internal_port }}/
    ProxyPassReverse        / http://localhost:{{ gpodder_internal_port }}/
</VirtualHost>