sovereign/roles/blog/templates/etc_apache2_sites-available...

<VirtualHost *:80>
    ServerName {{ blog_domain }}
    ServerAlias www.{{ blog_domain }}

    Redirect / https://{{ blog_domain }}/
</VirtualHost>


<VirtualHost *:443>
    ServerName {{ blog_domain }}
    ServerAlias www.{{ blog_domain }}

    SSLEngine on
    SSLProtocol ALL -SSLv2
    SSLHonorCipherOrder On
    SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS

    SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt
    SSLCertificateKeyFile   /etc/ssl/private/wildcard_private.key
    SSLCACertificateFile    /etc/ssl/certs/wildcard_ca.pem

    DocumentRoot            "/var/www/{{ blog_domain }}"
    DirectoryIndex          index.html
    Options                 -Indexes

    HostnameLookups         Off
</VirtualHost>