The _apps.du5t1n.xyz_ site now obtains its certificate from Let's Encrypt using the Apache _mod_md_ (managed domain) module. This dramatically simplifies the deployment of this certificate, eliminating the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to _certs.git_, and Jenkins to push it out to the web server.
24 lines
508 B
Plaintext
24 lines
508 B
Plaintext
MDomain apps.du5t1n.xyz
|
|
|
|
<VirtualHost _default_:80>
|
|
ServerName apps.du5t1n.xyz
|
|
|
|
RewriteEngine On
|
|
RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
|
|
</VirtualHost>
|
|
|
|
<VirtualHost _default_:443>
|
|
ServerName apps.du5t1n.xyz
|
|
|
|
Include conf.d/ssl.include
|
|
|
|
<IfModule mod_headers.c>
|
|
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
|
|
</IfModule>
|
|
|
|
DocumentRoot /srv/www/apps.du5t1n.xyz/htdocs
|
|
<Directory /srv/www/apps.du5t1n.xyz/htdocs>
|
|
Require all granted
|
|
</Directory>
|
|
</VirtualHost>
|