journalwatch: allow more TLS errors

[ansible.git] / roles / apache / templates / 000-default.conf

diff --git a/roles/apache/templates/000-default.conf b/roles/apache/templates/000-default.conf
index 8865a0ac29fb5f088210cf38e845f50bb146e02f..5e02d0b3af4c02555d0659c4e21039b92fa9063a 100644 (file)
--- a/roles/apache/templates/000-default.conf
+++ b/roles/apache/templates/000-default.conf
@@ -1,8 +1,8 @@
-# redirect all undefined virtual hosts to {{ apache.default_host }}
+# Default host: serve nothing.
 <VirtualHost *:80>
-    Redirect temp / https://{{ apache.default_host }}/
 </VirtualHost>
+{% if 'letsencrypt' in group_names %}
 <VirtualHost *:443>
     Use SSL letsencrypt/live
-    Redirect temp / https://{{ apache.default_host }}/
 </VirtualHost>
+{% endif %}