ServerRoot "/etc/httpd"

Listen 80

Include conf.modules.d/*.conf

User apache
Group apache

ServerAdmin root@localhost
ServerName {{ ansible_fqdn }}

ServerTokens Prod
ServerSignature Off

# default deny
<Directory />
    AllowOverride none
    Require all denied
</Directory>

DocumentRoot "{{ apache_public_dir }}/html"

KeepAlive On

# relax access to content within {{ apache_public_dir }}.
<Directory "{{ apache_public_dir }}">
    AllowOverride None
    Require all granted
</Directory>

# further relax access to the default document root:
<Directory "{{ apache_public_dir }}/html">
    Options FollowSymLinks

    AllowOverride None

    Require all granted
</Directory>

# serve index.html if a directory is requested
<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>

# deny .htaccess, .htpasswd
<Files ".ht*">
    Require all denied
</Files>

ErrorLog "logs/error_log"

LogLevel warn

<IfModule log_config_module>
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>

    CustomLog "logs/access_log" combined
</IfModule>

<IfModule alias_module>
    ScriptAlias /cgi-bin/ "{{ apache_public_dir }}/cgi-bin/"

</IfModule>

<Directory "{{ apache_public_dir }}/cgi-bin">
    AllowOverride None
    Options None
    Require all granted
</Directory>

<IfModule mime_module>
    TypesConfig /etc/mime.types

    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz

    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml
</IfModule>

AddDefaultCharset UTF-8

<IfModule mime_magic_module>
    MIMEMagicFile conf/magic
</IfModule>

EnableSendfile on

AddOutputFilterByType DEFLATE {{ apache_gzip_types | join(" ") }}

# Load config files in the "/etc/httpd/conf.d" directory, if any.
IncludeOptional conf.d/*.conf