adelgado/ansible-role-apache_ssl_vhosts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

separa directories

Browse source
This commit is contained in:
Antonio J. Delgado 2023-03-27 12:11:51 +03:00
parent c7ff875c62
commit 50797e7693
1 changed files with 21 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
templates/vhost.conf.j2
View file

@ -28,7 +28,7 @@
ServerName {{ item.vhostname }}
ServerAdmin {{ item.serveradmin|default("webmaster@" + item.vhostname ) }}
{% if item.server_aliases is defined %}
ServerAlias {% for alias in item.server_aliases %}{{ alias }} {% endfor %}
ServerAlias {% for alias in item.server_aliases %}{{ alias }} {% endfor %}
{% endif %}
{% if item.aliases is defined %}{% for alias in item.aliases %}
@ -54,18 +54,19 @@
{% endif %}
AllowOverride All
</Directory>{% endif %}
</Directory>
{% endif %}
{% if item.directories is defined %}{% for directory in item.directories %}
<Directory "{{ directory.path }}">
{% if directory.options is defined %}
Options {% for option in directory.options %}{{ option }} {% endfor %}
{% endif %}
AllowOverride {{ directory.allow_override | default("All") }}
Require {{ directory.require | default("all granted") }}
{{ directory.custom_code | default("") }}
</Directory>{% endfor %}{% endif %}
AllowOverride {{ directory.allow_override | default("All") }}
Require {{ directory.require | default("all granted") }}
{{ directory.custom_code | default("") }}
</Directory>
{% endfor %}{% endif %}
{% if item.directoriesmatches is defined %}{% for directorymatch in item.directoriesmatches %}
<DirectoryMatch "{{ directorymatch.path }}">
@ -73,10 +74,11 @@
Options {% for option in directorymatch.options %}{{ option }} {% endfor %}
{% endif %}
AllowOverride {{ directorymatch.allow_override | default("All") }}
Require {{ directorymatch.require | default("all granted") }}
AllowOverride {{ directorymatch.allow_override | default("All") }}
Require {{ directorymatch.require | default("all granted") }}
{{ directorymatch.custom_code | default("") }}
</DirectoryMatch>{% endfor %}{% endif %}
</DirectoryMatch>
{% endfor %}{% endif %}
## Logging
ErrorLog "/var/log/apache2/{{ item.vhostname }}_error_ssl.log"
@ -88,7 +90,6 @@
## Rewrite rules
RewriteEngine On
## SSL directives
SSLEngine on
SSLCertificateFile "/etc/letsencrypt/live/{{ item.vhostname }}/fullchain.pem"
@ -99,14 +100,14 @@
{% if item.ldap is defined %}
## LDAP authentication
<Location />
AuthType Basic
AuthName "Enter credentials"
AuthBasicProvider ldap
AuthLDAPGroupAttribute member
AuthLDAPSubGroupClass group
AuthLDAPGroupAttributeIsDN On
AuthLDAPURL {{ item.ldap.url }} #ldap://ldap.koti.site/ou=People,ou=Users,dc=koti,dc=site?uid
Require {{ item.ldap.require }} #valid-user
AuthType Basic
AuthName "Enter credentials"
AuthBasicProvider ldap
AuthLDAPGroupAttribute member
AuthLDAPSubGroupClass group
AuthLDAPGroupAttributeIsDN On
AuthLDAPURL {{ item.ldap.url }} #ldap://ldap.koti.site/ou=People,ou=Users,dc=koti,dc=site?uid
Require {{ item.ldap.require }} #valid-user
</Location>
{% endif %}
@ -121,7 +122,7 @@
{% if item.custom_code is defined %}
## Custom fragment
{{ item.custom_code }}
{{ item.custom_code }}
## End of custom fragment
{% endif %}
</VirtualHost>