{% set hostname = ansible_nodename + '.' + fqdn %}
{% set ssl_ca = '' %}
{% set ssl_cert_hostname = 'SSLCertificateFile "/etc/ssl/certs/' + hostname + '.crt"' %}
{% set ssl_key_hostname = 'SSLCertificateKeyFile "/etc/ssl/private/' + hostname + '.key"' %}

<VirtualHost *:80>
    Header edit Location ^http://(.*)\$ https://\$1
    ServerName {{ hostname }}
    ServerAdmin carlos.konstanski@verizonwireless.com
    ProxyPreserveHost On
    ProxyPass /Openbook http://127.0.0.1:8080/Openbook
    ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook
    RedirectMatch "^/$" "/Openbook"
</VirtualHost>

<VirtualHost *:443>
    Header edit Location ^http://(.*)\$ https://\$1
    ServerName {{ hostname }}
    ServerAdmin carlos.konstanski@verizonwireless.com
    SSLEngine on
    {{ ssl_ca }}
    {{ ssl_cert_hostname }}
    {{ ssl_key_hostname }}
    SSLOptions StrictRequire
    SSLProtocol TLSv1 TLSv1.1 TLSv1.2
    SSLCipherSuite AES128+EECDH:AES128+EDH
    SSLHonorCipherOrder on
    SSLCompression off
    ProxyPreserveHost On
    ProxyPass /Openbook http://127.0.0.1:8080/Openbook
    ProxyPassReverse /Openbook http://127.0.0.1:8080/Openbook
    RedirectMatch "^/$" "/Openbook"
</VirtualHost>