From afd71639f414c2f6efc322d766a52764be771fdd Mon Sep 17 00:00:00 2001
From: "flyingscorpio@clevo" <tfranken@protonmail.com>
Date: Mon, 28 Mar 2022 16:02:40 +0200
Subject: [PATCH] Add vhost for tunuifranken.info

---
 roles/tunuifranken-apache2/tasks/main.yml     | 14 +++++++
 .../templates/tunuifranken.info.conf.j2       | 37 +++++++++++++++++++
 roles/tunuifranken-apache2/vars/main.yml      |  1 +
 3 files changed, 52 insertions(+)
 create mode 100644 roles/tunuifranken-apache2/templates/tunuifranken.info.conf.j2

diff --git a/roles/tunuifranken-apache2/tasks/main.yml b/roles/tunuifranken-apache2/tasks/main.yml
index ee968cd..0f6102b 100644
--- a/roles/tunuifranken-apache2/tasks/main.yml
+++ b/roles/tunuifranken-apache2/tasks/main.yml
@@ -7,3 +7,17 @@
     group: "{{ group_tunuifranken }}"
     state: directory
     mode: 0775
+
+- name: Copy vHost conf
+  become: true
+  template:
+    src: tunuifranken.info.conf.j2
+    dest: /etc/apache2/sites-available/tunuifranken.info.conf
+  notify: Reload apache2 service
+
+- name: Activate vHost
+  become: true
+  command: a2ensite tunuifranken.info.conf
+  register: result
+  changed_when: "'already enabled' not in result.stdout"
+  notify: Reload apache2 service
diff --git a/roles/tunuifranken-apache2/templates/tunuifranken.info.conf.j2 b/roles/tunuifranken-apache2/templates/tunuifranken.info.conf.j2
new file mode 100644
index 0000000..541912e
--- /dev/null
+++ b/roles/tunuifranken-apache2/templates/tunuifranken.info.conf.j2
@@ -0,0 +1,37 @@
+<VirtualHost *:80>
+    ServerName tunuifranken.info
+    ServerAdmin {{ server_admin_email_tunuifranken }}
+    DocumentRoot /var/www/empty
+
+    RewriteEngine on
+    RewriteCond %{SERVER_NAME} =tunuifranken.info
+    RewriteRule ^https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
+
+    ErrorLog ${APACHE_LOG_DIR}/tunuifranken.info.error.log
+    CustomLog ${APACHE_LOG_DIR}/tunuifranken.info.access.log combined
+</VirtualHost>
+<VirtualHost *:443>
+    ServerName tunuifranken.info
+    ServerAdmin {{ server_admin_email_tunuifranken }}
+    DocumentRoot {{ dir_tunuifranken }}
+
+    Alias /favicon.png {{ dir_tunuifranken }}/img/favicon.png
+
+    <Directory "{{ dir_tunuifranken }}">
+        <Files ~ "(\.gitignore|README.md|.*sh|.*template.*html|header.html|footer.html|Makefile)">
+            Require all denied
+        </Files>
+    </Directory>
+    <Directory "{{ dir_tunuifranken }}/.git">
+        Require all denied
+    </Directory>
+    <Directory "{{ dir_tunuifranken }}/bin">
+        Require all denied
+    </Directory>
+
+    ErrorLog ${APACHE_LOG_DIR}/tunuifranken.info.error.log
+    CustomLog ${APACHE_LOG_DIR}/tunuifranken.info.access.log combined
+
+    #SSLCertificateFile /etc/letsencrypt/live/tunuifranken.info/fullchain.pem
+    #SSLCertificateKeyFile /etc/letsencrypt/live/tunuifranken.info/privkey.pem
+</VirtualHost>
diff --git a/roles/tunuifranken-apache2/vars/main.yml b/roles/tunuifranken-apache2/vars/main.yml
index 05c170f..1f8bd3d 100644
--- a/roles/tunuifranken-apache2/vars/main.yml
+++ b/roles/tunuifranken-apache2/vars/main.yml
@@ -2,3 +2,4 @@
 dir_tunuifranken: /var/www/tunuifranken.info
 owner_tunuifranken: "{{ ansible_facts['env']['USER'] }}"
 group_tunuifranken: "{{ ansible_facts['env']['USER'] }}"
+server_admin_email_tunuifranken: tfranken@protonmail.com