Add framework for managing letsencrypt certificates

[chef.git] / cookbooks / letsencrypt / templates / default / apache.erb

diff --git a/cookbooks/letsencrypt/templates/default/apache.erb b/cookbooks/letsencrypt/templates/default/apache.erb
new file mode 100644 (file)
index 0000000..10d4c52
--- /dev/null
+++ b/cookbooks/letsencrypt/templates/default/apache.erb
@@ -0,0 +1,31 @@
+# DO NOT EDIT - This file is being maintained by Chef
+
+<VirtualHost *:80>
+        ServerName acme.openstreetmap.org
+        ServerAlias acme.osm.org
+        ServerAdmin webmaster@openstreetmap.org
+
+        CustomLog /var/log/apache2/acme.openstreetmap.org-access.log combined
+        ErrorLog /var/log/apache2/acme.openstreetmap.org-error.log
+
+        DocumentRoot /srv/acme.openstreetmap.org/html
+</VirtualHost>
+
+<VirtualHost *:443>
+        ServerName acme.openstreetmap.org
+        ServerAlias acme.osm.org
+        ServerAdmin webmaster@openstreetmap.org
+
+        CustomLog /var/log/apache2/acme.openstreetmap.org-access.log combined
+        ErrorLog /var/log/apache2/acme.openstreetmap.org¬-error.log
+
+        SSLEngine on
+        SSLCertificateFile /etc/ssl/certs/acme.openstreetmap.org.pem
+        SSLCertificateKeyFile /etc/ssl/private/acme.openstreetmap.org.key
+
+        DocumentRoot /srv/acme.openstreetmap.org/html
+</VirtualHost>
+
+<Directory /srv/acme.openstreetmap.org/html>
+        Require all granted
+</Directory>