sirona-aem add ssl-cert www.ankyloscongress.com

diff --git a/customer/sirona-aem/production.yaml b/customer/sirona-aem/production.yaml
index fcc899a15fca6b5af48a77dd8ae7dcd9ea5e332e..7c769d1e48b9cf062e58f4a094fae72e2b67c455 100644 (file)
--- a/customer/sirona-aem/production.yaml
+++ b/customer/sirona-aem/production.yaml
@@ -1486,7 +1486,11 @@ infra::profile::aem::publish::pp_vhosts:
       - www.ankyloscongress.com
       - ankyloscongress.com
     docroot: '/opt/adobe/www/cache/content/events/ankylos-congress-2018'
-    ssl: false
+    cert_servername: 'www.ankyloscongress.com'
+    cert_customer: 'sirona'
+    ssl_cert: '/etc/pki/tls/certs/www.ankyloscongress.com-cert.pem'
+    ssl_key: '/etc/pki/tls/private/www.ankyloscongress.com-key.pem'
+    ssl_chain: '/etc/pki/tls/certs/www.ankyloscongress.com-cert.pem'
     docroot_owner: apache
     setenvifnocase:
       - 'Accept-Language ^.*$ language=en'
@@ -1514,6 +1518,11 @@ infra::profile::aem::publish::pp_vhosts:
           - '%%{ich-trickse}{HTTP_HOST} !^www\. [NC]'
         rewrite_rule:
           - '^(.*)$ %%{ich-trickse}{REQUEST_SCHEME}://www.%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
+      - comment: 'http to https'
+        rewrite_cond:
+          - '%%{ich-trickse}{HTTPS} !=on'
+        rewrite_rule:
+          - '(.*) https://%%{ich-trickse}{HTTP_HOST}%%{ich-trickse}{REQUEST_URI} [R=301,L]'
       - comment: 'lanugage Rewrite use Env Vars'
         rewrite_rule:
           - '^/$ %%{ich-trickse}{REQUEST_SCHEME}://www.ankyloscongress.com/%%{ich-trickse}{ENV:language}.html [R=301,L]'