gistfile1.txt

/etc/httpd/conf.d/{{ pillar['fqdn'] }}-ssl.conf:
  apache.configfile:
    - config:
      - VirtualHost:
          this: '*:443'
          SSLEngine: 'on'
          Header: set Access-Control-Allow-Origin "https://{{ pillar['fqdn'] }}" 
          SSLCertificateFile: /opt/certbot/config/live/{{ pillar['fqdn'] }}/cert.pem
          SSLCertificateKeyFile: /opt/certbot/config/live/{{ pillar['fqdn'] }}/privkey.pem
          SSLCertificateChainFile: /opt/certbot/config/live/{{ pillar['fqdn'] }}/fullchain.pem
          SSLProtocol: all -SSLv2
          SSLCipherSuite: ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
          ServerName:
            - {{ pillar['fqdn'] }}
          ServerAlias:
            - {{ pillar['fqdn2'] }}
          ErrorLog: logs/{{ pillar['fqdn'] }}-ssl-error_log
          CustomLog: logs/{{ pillar['fqdn'] }}-ssl-access_log combined
          DocumentRoot: /opt/code/somesite/public
          PassengerRuby: /usr/local/rbenv/versions/2.3.0/bin/ruby
          PassengerMinInstances: 3
          PassengerPreStart: https://{{ pillar['fqdn'] }}
          RailsEnv: {{ pillar['environment'] }}
          AddType:
            - image/svg+xml svg svgz
          AddEncoding:
            - gzip svgz
          Directory:
            this: /opt/code/somesite/public
            Allow from:
              - all 
            Options: 
              - -MultiViews
            Require:
              - all granted
          Location:
            this: /assets/
            RewriteEngine: on
            RewriteCond: '%{HTTP:Accept-Encoding} \b(x-)?gzip\b'
            RewriteCond: '%{REQUEST_FILENAME}.gz -s' 
            RewriteRule: ^(.+) $1.gz [L] 
          FilesMatch:
            this: \.css\.gz$
            ForceType: text/css
            Header: set Content-Encoding gzip
          FilesMatch: 
            this: \.js\.gz$
            ForceType: text/javascript
            Header: set Content-Encoding gzip