mirror of
https://github.com/geerlingguy/ansible-role-apache
synced 2024-12-22 19:10:19 +01:00
547c0b404c
By default I leave it as "*", but for many cases, we don't want to bind our apache to all network addresses available for the server. For example if we want to only bind the apache to the localhost, we can use the following configuration: apache_listen_ip: "127.0.0.1"
44 lines
1.2 KiB
YAML
44 lines
1.2 KiB
YAML
---
|
|
apache_enablerepo: ""
|
|
|
|
apache_listen_ip: "*"
|
|
apache_listen_port: 80
|
|
apache_listen_port_ssl: 443
|
|
|
|
apache_create_vhosts: true
|
|
apache_vhosts_filename: "vhosts.conf"
|
|
|
|
# On Debian/Ubuntu, a default virtualhost is included in Apache's configuration.
|
|
# Set this to `true` to remove that default.
|
|
apache_remove_default_vhost: false
|
|
|
|
apache_global_vhost_settings: |
|
|
DirectoryIndex index.php index.html
|
|
|
|
apache_vhosts:
|
|
# Additional properties: 'serveradmin, serveralias, extra_parameters'.
|
|
- servername: "local.dev"
|
|
documentroot: "/var/www/html"
|
|
|
|
apache_vhosts_ssl: []
|
|
# Additional properties: 'serveradmin, extra_parameters'.
|
|
# - servername: "local.dev",
|
|
# documentroot: "/var/www/html",
|
|
# certificate_file: "/path/to/certificate.crt",
|
|
# certificate_key_file: "/path/to/certificate.key",
|
|
# # Optional.
|
|
# certificate_chain_file: "/path/to/certificate_chain.crt"
|
|
|
|
apache_ignore_missing_ssl_certificate: true
|
|
|
|
apache_ssl_protocol: "All -SSLv2 -SSLv3"
|
|
apache_ssl_cipher_suite: "AES256+EECDH:AES256+EDH"
|
|
|
|
# Only used on Debian/Ubuntu.
|
|
apache_mods_enabled:
|
|
- rewrite.load
|
|
- ssl.load
|
|
apache_mods_disabled: []
|
|
|
|
# Set initial apache state. Recommended values: `started` or `stopped`
|
|
apache_state: started
|