saving uncommitted changes in /etc prior to apt run

diff --git a/.etckeeper b/.etckeeper
index 6c6b784516d25516235b2276db15166f730299e1..cf7f813184ef02e161d95910b89ea0bdb1990aa3 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -465,6 +465,7 @@ maybe chmod 0644 'apache2/sites-available/http_hoellein.online.conf'
 maybe chmod 0644 'apache2/sites-available/http_nextcloud.conf'
 maybe chmod 0644 'apache2/sites-available/http_siedlerverein.conf'
 maybe chmod 0644 'apache2/sites-available/https_siederverein.conf'
+maybe chmod 0644 'apache2/sites-available/incinga2.conf'
 maybe chmod 0644 'apache2/sites-available/mail.hoellein.online.conf'
 maybe chmod 0644 'apache2/sites-available/nextcloud.conf'
 maybe chmod 0644 'apache2/sites-available/nextcloud_siedlerverein.conf'

diff --git a/apache2/sites-available/incinga2.conf b/apache2/sites-available/incinga2.conf
new file mode 100644 (file)
index 0000000..ed488dd
--- /dev/null
+++ b/apache2/sites-available/incinga2.conf
@@ -0,0 +1,35 @@
+<IfModule mod_ssl.c>
+        <VirtualHost *:443>
+                Header set Referrer-Policy "no-referrer"
+                ServerAdmin admin@hoellein.online
+                DocumentRoot /var/www/icinga2/
+                ServerName icinga.hoellein.online 
+                ServerAlias www.icinga2.hoellein.online
+                <Directory />
+                        Options FollowSymLinks
+                        AllowOverride all
+                </Directory>
+                <LocationMatch "/(data|conf|bin|inc)/">
+                        Require all denied
+                        Satisfy All
+                </LocationMatch>
+
+                # Possible values include: debug, info, notice, warn, error, crit,
+                # alert, emerg.
+                LogLevel debug
+                ErrorLog ${APACHE_LOG_DIR}/icinga2.hoellein.online_error.log
+                CustomLog ${APACHE_LOG_DIR}/icinga2.hoellein.online.log combined
+
+                #   SSL Engine Switch:
+                #   Enable/Disable SSL for this virtual host.
+                SSLEngine on
+                SSLProtocol all -SSLv2 -SSLv3
+                <FilesMatch "\.(cgi|shtml|phtml|php)$">
+                        SSLOptions +StdEnvVars
+                </FilesMatch>
+                Include /etc/letsencrypt/options-ssl-apache.conf
+                SSLCertificateFile /etc/letsencrypt/live/icinga2.hoellein.online/fullchain.pem 
+                SSLCertificateKeyFile /etc/letsencrypt/live/icinga2.hoellein.online/privkey.pem
+        </VirtualHost>
+</IfModule>
+

diff --git a/apache2/sites-enabled/incinga2.conf b/apache2/sites-enabled/incinga2.conf
new file mode 120000 (symlink)
index 0000000..63f00fb
--- /dev/null
+++ b/apache2/sites-enabled/incinga2.conf
@@ -0,0 +1 @@
+../sites-available/incinga2.conf
\ No newline at end of file