<VirtualHost *:80>
   ServerName nagios-external.fedoraproject.org
   ProxyPass "/.well-known/acme-challenge" "http://certgetter01/.well-known/acme-challenge"
   Redirect permanent / https://nagios-external.fedoraproject.org/
</VirtualHost>

<VirtualHost *:443>
   ServerName nagios-external.fedoraproject.org:443

   SSLEngine on
   SSLProtocol {{ ssl_protocols }}
   SSLCipherSuite {{ ssl_ciphers }}
   Header always add Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"

   SSLCertificateFile /etc/pki/tls/certs/nagios-external.fedoraproject.org.cert
   SSLCertificateChainFile /etc/pki/tls/certs/nagios-external.fedoraproject.org.intermediate.cert
   SSLCertificateKeyFile /etc/pki/tls/private/nagios-external.fedoraproject.org.key

   ProxyPass "/.well-known/acme-challenge" "http://certgetter01/.well-known/acme-challenge"
</VirtualHost>
