#
# This file is generated and managed by Ansible
#

{% include 'git-redirects.conf.j2' %}

##
# vhost configuration
##

<VirtualHost *:80>
  ServerName {{ hostname }}

  Use GitRedirects

  LogLevel warn
  ErrorLog /var/log/apache2/{{ hostname }}_error.log
  CustomLog /var/log/apache2/{{ hostname }}_access.log combined
  ServerSignature Off
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost *:443>
  ServerName {{ hostname }}

  SSLCertificateFile      /etc/letsencrypt-certs/{{ hostname }}/{{ hostname }}.cer
  SSLCertificateKeyFile   /etc/letsencrypt-certs/{{ hostname }}/{{ hostname }}.key
  SSLCertificateChainFile /etc/letsencrypt-certs/{{ hostname }}/ca.cer
  SSLProtocol All -SSLv2 -SSLv3
  # Note: this list should ensure ciphers that provide forward secrecy
  SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP
  SSLHonorCipherOrder on

  Use GitRedirects

  ErrorLog /var/log/apache2/{{ hostname }}_error.log
  CustomLog /var/log/apache2/{{ hostname }}_access.log combined
  ServerSignature Off
</VirtualHost>
</IfModule>

UndefMacro GitRedirects