infra::additional_classes:
- infra::profile::wordpress
+ - infra::profile::apache_php
- apache::mod::headers
- infra::profile::cron
setenvif:
- "HTTPS on HTTPS=on"
+infra::profile::apache::pp_vhosts:
insideforum:
docroot: /var/www/sparkasseblog
servername: dev-insideforum.sparkasseblog.de
ssl_cert: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem'
ssl_key: '/etc/pki/tls/private/sparkasseblog.de-key.pem'
ssl_chain: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem'
- custom_fragment: |
- # Webclient Cert Config
- SSLVerifyClient require
- SSLCACertificateFile "/etc/pki/tls/certs/spk-root-ca.pem"
- SSLCARevocationFile "/etc/pki/tls/certs/spk-cacrl.pem"
- SSLCARevocationCheck "chain"
- SSLVerifyClient optional
- SSLVerifyDepth 2
-# ssl_verify_client: optional
-# ssl_crl: '/etc/pki/tls/certs/spk-cacrl.pem'
-# ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem'
-# ssl_verify_depth: '2'
+ ssl_verify_client: optional
+ ssl_crl: '/etc/pki/tls/certs/spk-cacrl.pem'
+ ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem'
+ ssl_verify_depth: '2'
directories:
- location1:
provider: location