diff --git a/roles/totpcgi/templates/configmap.yml b/roles/totpcgi/templates/configmap.yml
index 87f3aa2d34..c0afbc804a 100644
--- a/roles/totpcgi/templates/configmap.yml
+++ b/roles/totpcgi/templates/configmap.yml
@@ -58,13 +58,13 @@ data:
     AddDefaultCharset UTF-8
     CoreDumpDirectory /tmp
 
-    AddHandler cgi-script .cgi
     DirectoryIndex index.cgi
 
     <VirtualHost *:8080>
         Header set Cache-Control no-cache
         Header set Expires 0
         Alias /totpcgiprovision /var/www/totpcgi-provisioning
+        AddHandler cgi-script .cgi
 
         <Directory "/var/www/totpcgi-provisioning">
             Options ExecCGI
@@ -101,6 +101,7 @@ data:
         SSLHonorCipherOrder On
         SSLCipherSuite {{ ssl_ciphers }}
         SSLProtocol {{ ssl_protocols }}
+        AddHandler cgi-script .cgi
 
         SSLVerifyClient require
         SSLVerifyDepth 10