From e7411874fe0cf3dd9ecb3b645ebb337375ea581f Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Sat, 9 Sep 2017 23:42:19 +0000
Subject: [PATCH] Do not httpd-redirect for acme challenges

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/httpd/website/templates/website.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/httpd/website/templates/website.conf b/roles/httpd/website/templates/website.conf
index 8eed648739..804942a557 100644
--- a/roles/httpd/website/templates/website.conf
+++ b/roles/httpd/website/templates/website.conf
@@ -17,6 +17,7 @@
 {% if sslonly %}
   RewriteEngine On
   RewriteCond %{HTTPS} off
+  RewriteCond %{REQUEST_URI} !/.well-known/acme-challenge/.*
   RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [NE]
 {% else %}
   Include "conf.d/{{ name }}/*.conf"