diff options
| author | Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> | 2024-06-10 17:24:21 +0200 |
|---|---|---|
| committer | Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> | 2024-06-10 18:32:10 +0200 |
| commit | b50b60623c4f2555e573224fa8ec7f4f444d99eb (patch) | |
| tree | 7f84511beaa895bcc57b3c7e664dbab4b82fc53d | |
| parent | fa6d2fe4f8175b6db85186fb468955cbac9a820e (diff) | |
| download | etc_apache2-b50b60623c4f2555e573224fa8ec7f4f444d99eb.tar.gz etc_apache2-b50b60623c4f2555e573224fa8ec7f4f444d99eb.tar.bz2 etc_apache2-b50b60623c4f2555e573224fa8ec7f4f444d99eb.zip | |
sites: mumble.replicant.us: add TLS certificate.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
| -rw-r--r-- | sites-available/mumble.replicant.us.conf | 23 | ||||
| l--------- | sites-enabled/mumble.replicant.us.conf | 1 |
2 files changed, 22 insertions, 2 deletions
diff --git a/sites-available/mumble.replicant.us.conf b/sites-available/mumble.replicant.us.conf index 79d0644..f722e5d 100644 --- a/sites-available/mumble.replicant.us.conf +++ b/sites-available/mumble.replicant.us.conf @@ -14,6 +14,25 @@ # along with this program. If not, see <https://www.gnu.org/licenses/>. <VirtualHost *:80> - ServerName mumble.replicant.us - DocumentRoot /var/www/mumble.replicant.us + ServerName mumble.replicant.us + RewriteEngine On + RewriteCond %{HTTPS} off + RewriteCond %{REMOTE_ADDR} !=127.0.0.1 + RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} </VirtualHost> + +<IfModule mod_ssl.c> + <VirtualHost *:443> + ServerAdmin contact@replicant.us + ServerName mumble.replicant.us + + DocumentRoot /var/www/mumble.replicant.us + + Header always set Strict-Transport-Security "max-age=31536000;" + + SSLEngine On + SSLCertificateFile /etc/letsencrypt/live/mumble.replicant.us/cert.pem + SSLCertificateChainFile /etc/letsencrypt/live/mumble.replicant.us/chain.pem + SSLCertificateKeyFile /etc/letsencrypt/live/mumble.replicant.us/privkey.pem + </VirtualHost> +</IfModule> diff --git a/sites-enabled/mumble.replicant.us.conf b/sites-enabled/mumble.replicant.us.conf new file mode 120000 index 0000000..95caf35 --- /dev/null +++ b/sites-enabled/mumble.replicant.us.conf @@ -0,0 +1 @@ +../sites-available/mumble.replicant.us.conf
\ No newline at end of file |