17 lines
1 KiB
Django/Jinja
17 lines
1 KiB
Django/Jinja
<VirtualHost *:80>
|
|
ServerAdmin admin@fedoraproject.org
|
|
ServerName {{ ansible_hostname }}
|
|
</VirtualHost>
|
|
<VirtualHost *:443>
|
|
ServerAdmin admin@fedoraproject.org
|
|
ServerName {{ ansible_hostname }}
|
|
|
|
SSLEngine on
|
|
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
|
|
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
|
|
#SSLCertificateChainFile /etc/pki/tls/cert.pem
|
|
SSLHonorCipherOrder On
|
|
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
|
|
SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
|
|
</VirtualHost>
|
|
|