Skip to content
GitLab
Verified Commit 7e6df485 authored by Mattia Rizzolo's avatar Mattia Rizzolo
Browse files

apache2: use the newly issued LE certificates 



Signed-off-by: Mattia Rizzolo's avatarMattia Rizzolo <mattia@debian.org>
parent c00d2ab8
Hide whitespace changes
Inline Side-by-side
hosts/jenkins/etc/apache2/sites-available/jenkins.debian.net.conf
View file @ 7e6df485
...@@ -8,8 +8,8 @@ ...@@ -8,8 +8,8 @@
<Macro common-directives-ssl $name> <Macro common-directives-ssl $name>
SSLEngine on SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl/$name.key SSLCertificateKeyFile /var/lib/dehydrated/certs/$name/privkey.key
SSLCertificateFile /etc/apache2/ssl/$name.pem SSLCertificateFile /var/lib/dehydrated/certs/$name/fullchain.pem
SSLCipherSuite HIGH:!aNULL:!eNULL:!EXP:!LOW:!MD5 SSLCipherSuite HIGH:!aNULL:!eNULL:!EXP:!LOW:!MD5
SSLHonorCipherOrder on SSLHonorCipherOrder on
Header always add Strict-Transport-Security "max-age=15552000" Header always add Strict-Transport-Security "max-age=15552000"
...@@ -272,14 +272,14 @@ Use https-redirect www.diffoscope.org ...@@ -272,14 +272,14 @@ Use https-redirect www.diffoscope.org
<VirtualHost *:443> <VirtualHost *:443>
Use common-directives www.reproducible-builds.org Use common-directives www.reproducible-builds.org
Use common-directives-ssl reproducible-builds.org Use common-directives-ssl www.reproducible-builds.org
# just redirect everything to non-www # just redirect everything to non-www
Redirect permanent / https://reproducible-builds.org/ Redirect permanent / https://reproducible-builds.org/
</VirtualHost> </VirtualHost>
<VirtualHost *:443> <VirtualHost *:443>
Use common-directives www.diffoscope.org Use common-directives www.diffoscope.org
Use common-directives-ssl diffoscope.org Use common-directives-ssl www.diffoscope.org
# just redirect everything to non-www # just redirect everything to non-www
Redirect permanent / https://diffoscope.org/ Redirect permanent / https://diffoscope.org/
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment