ansible-role-nextcloud/templates/apache-vhost.conf.j2

{{ ansible_managed | comment }}

<VirtualHost *:443 *:8843>

  ServerName {{nextcloud_server_names|first}}
  {% for name in nextcloud_server_names | difference([nextcloud_server_names|first]) %}
  ServerAlias {{name}}
  {% endfor %}

  SSLEngine on
  SSLCertificateFile "/etc/ssl/certs/{{nextcloud_server_names|first}}.cert.pem"
  SSLCertificateKeyFile "/etc/ssl/private/{{nextcloud_server_names|first}}.key.pem"
  {% if not certificate_provider == "selfsigned" %}
  SSLCertificateChainFile "/etc/ssl/certs/{{nextcloud_server_names|first}}.chain.pem"
  {% endif %}
  Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"

  DocumentRoot {{nextcloud_directory}}

  <Directory {{nextcloud_directory}}/>

    Options +FollowSymlinks
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    SetEnv HOME {{nextcloud_directory}}
    SetEnv HTTP_HOME {{nextcloud_directory}}

  </Directory>

  ErrorLog ${APACHE_LOG_DIR}/error.log
  CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>

<VirtualHost *:80>

  ServerName {{nextcloud_server_names|first}}
  {% for name in nextcloud_server_names | difference(nextcloud_server_names|first) %}
  ServerAlias {{name}}
  {% endfor %}

  RewriteEngine On
  RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]

</VirtualHost>