From: Alex Dehnert <alex@dehnerts.com>
Date: Sat, 5 Aug 2023 18:48:23 +0000 (+0000)
Subject: Tweaks to set up more hostnames
X-Git-Url: https://dehnerts.com/gitweb/?a=commitdiff_plain;h=ecf63c258eb2736fec128303a72a157b3acb3bce;p=sysconfig%2Fapache2.git

Tweaks to set up more hostnames
---

diff --git a/sites-available/mit-proxy.conf b/sites-available/mit-proxy.conf
index 7babd55..1ac172f 100644
--- a/sites-available/mit-proxy.conf
+++ b/sites-available/mit-proxy.conf
@@ -41,27 +41,34 @@
     ProxyPassReverse "/"  "http://zulip.augsburg.vms.dehnerts.com/"
     ProxyPreserveHost on
 
-    DocumentRoot /var/www/letsencrypt-verify/
+    DocumentRoot /var/www/html/
     RewriteEngine on
-    RewriteCond /var/www/letsencrypt-verify/%{REQUEST_URI} !-f
+    RewriteCond /var/www/html/%{REQUEST_URI} !-f
     RewriteRule ^/.well-known/acme-challenge/(.*)$ http://zulip.augsburg.vms.dehnerts.com/.well-known/acme-challenge/$1 [P,QSA,L]
 </VirtualHost>
 
-#<IfModule mod_ssl.c>
-#<VirtualHost *:443>
-#    ServerName zulip.dehnerts.com
-#    ServerAlias *.zulip.dehnerts.com
-#    SSLProxyEngine on
-#    SSLProxyVerify require
-#    SSLProxyVerifyDepth 2
-#    SSLProxyCACertificatePath /etc/ssl/certs
-#    SSLProxyCheckPeerName on
-#    ProxyPass "/"  "https://zulip.augsburg.vms.dehnerts.com/"
-#    ProxyPassReverse "/"  "https://zulip.augsburg.vms.dehnerts.com/"
-#    ProxyPreserveHost on
-#    Include sites-common/ssl-common
-#    SSLCertificateFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
-#    SSLCertificateChainFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
-#    SSLCertificateKeyFile /etc/letsencrypt/live/zulip.dehnerts.com/privkey.pem
-#</VirtualHost>
-#</IfModule>
+<IfModule mod_ssl.c>
+<VirtualHost *:443>
+    ServerName zulip.dehnerts.com
+    ServerAlias *.zulip.dehnerts.com
+    SSLProxyEngine on
+    SSLProxyVerify require
+    SSLProxyVerifyDepth 2
+    SSLProxyCACertificatePath /etc/ssl/certs
+    SSLProxyCheckPeerName on
+    ProxyPass "/"  "https://zulip.augsburg.vms.dehnerts.com/"
+    ProxyPassReverse "/"  "https://zulip.augsburg.vms.dehnerts.com/"
+    ProxyPreserveHost on
+    Include sites-common/ssl-common
+    <IfFile "/etc/letsencrypt/live/zulip.dehnerts.com/">
+        SSLCertificateFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
+        SSLCertificateChainFile /etc/letsencrypt/live/zulip.dehnerts.com/fullchain.pem
+        SSLCertificateKeyFile /etc/letsencrypt/live/zulip.dehnerts.com/privkey.pem
+    </IfFile>
+    <IfFile ! "/etc/letsencrypt/live/zulip.dehnerts.com/">
+        #Warning "correct default cert not detected, falling back to snakeoil"
+        SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
+        SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
+    </IfFile>
+</VirtualHost>
+</IfModule>
diff --git a/sites-common/default b/sites-common/default
index 7fbca5c..9a46a8a 100644
--- a/sites-common/default
+++ b/sites-common/default
@@ -1,6 +1,6 @@
 ServerAdmin webmaster@dehnerts.com
 ServerName chankillo.dehnerts.com
-ServerAlias chankillo.mit.edu dehnerts.com www.dehnerts.com www.dehnert.arctic.org
+ServerAlias chankillo.mit.edu dehnerts.com www.dehnerts.com www.dehnert.arctic.org git.dehnerts.com
 
 DocumentRoot /var/www/html/
 <Directory />