dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

websites/hlc: Switch to mod_md for cert management 

To avoid having separate certificates for the canonical
_www.hatchlearningcenter.org_ site and all the redirects, we'll combine
these virtual hosts into one.  We can use a `RewriteCond` to avoid the
redirect for the canonical name itself.
master
Dustin 2025-08-24 20:07:15 -05:00
parent fb93598586
commit 524ac0931a
1 changed files with 4 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
roles/websites/hatchlearningcenter.org/files/hatchlearningcenter.org.httpd.conf
View File

@ -1,4 +1,6 @@
# vim: set ft=apache sw=4 ts=4 sts=4 et : # vim: set ft=apache sw=4 ts=4 sts=4 et :
MDomain hatchlearningcenter.org
<VirtualHost *:80> <VirtualHost *:80>
ServerName hatchlearningcenter.org ServerName hatchlearningcenter.org
ServerAlias \ ServerAlias \
@ -21,6 +23,7 @@
<VirtualHost _default_:443> <VirtualHost _default_:443>
ServerName hatchlearningcenter.org ServerName hatchlearningcenter.org
ServerAlias \ ServerAlias \
www.hatchlearningcenter.org \
hatchlearningcenter.com \ hatchlearningcenter.com \
www.hatchlearningcenter.com \ www.hatchlearningcenter.com \
hlcks.org \ hlcks.org \
@ -34,31 +37,12 @@
Include conf.d/ssl.include Include conf.d/ssl.include
SSLCertificateFile /etc/pki/tls/certs/hatchlearningcenter.org.cer
SSLCertificateKeyFile /etc/pki/tls/private/hatchlearningcenter.org.key
SSLCertificateChainFile /etc/pki/tls/certs/hatchlearningcenter.org.cer
Header always set \ Header always set \
Strict-Transport-Security "max-age=63072000; includeSubDomains" Strict-Transport-Security "max-age=63072000; includeSubDomains"
RewriteEngine On RewriteEngine On
RewriteCond %{SERVER_NAME} !^www\.hatchlearningcenter\.org$
RewriteRule /.* https://www.hatchlearningcenter.org$0 [R=301,L] RewriteRule /.* https://www.hatchlearningcenter.org$0 [R=301,L]
</VirtualHost>
<VirtualHost _default_:443>
ServerName www.hatchlearningcenter.org
Include conf.d/ssl.include
SSLCertificateFile /etc/pki/tls/certs/hatchlearningcenter.org.cer
SSLCertificateKeyFile /etc/pki/tls/private/hatchlearningcenter.org.key
SSLCertificateChainFile /etc/pki/tls/certs/hatchlearningcenter.org.cer
Header always set \
Strict-Transport-Security "max-age=63072000; includeSubDomains"
SSLProxyEngine On
RewriteEngine On
DocumentRoot /srv/www/hatchlearningcenter.org/htdocs DocumentRoot /srv/www/hatchlearningcenter.org/htdocs
<Directory /srv/www/hatchlearningcenter.org/htdocs> <Directory /srv/www/hatchlearningcenter.org/htdocs>