Add info about Ansible management

files/add-headers.conf

@@ -1 +1,3 @@
+# Ansible managed
+
 Header always set Strict-Transport-Security "max-age=63072000"

files/letsencrypt.conf

@@ -1,3 +1,5 @@
+# Ansible managed
+
 Alias /.well-known/acme-challenge/ "/var/lib/dehydrated/acme-challenges/"
 
 <Directory "/var/lib/dehydrated/acme-challenges">

files/sao-cache.conf

@@ -1,4 +1,4 @@
-# Verwaltet durch Ansible (Rolle "apache2")
+# Ansible managed
 
 <IfModule mod_expires.c>
     ExpiresActive on

files/server-status.conf

@@ -1,3 +1,5 @@
+# Ansible managed
+
 <VirtualHost *:80>
     ServerName localhost
 </VirtualHost>

templates/munin_configuration

@@ -1,6 +1,5 @@
+# Ansible managed
+
 [apache*]
 env.url http://localhost/server-status?auto
-{% if inventory_hostname == "orwell" %}
-env.ports 443
-{% endif %}
 env.showfree 1

templates/remoteip.conf

@@ -1,3 +1,5 @@
+# Ansible managed
+
 RemoteIPHeader X-Forwarded-For
 RemoteIPTrustedProxy {{ gateway_host_ip }}
 

templates/ssl.conf

@@ -1,3 +1,5 @@
+# Ansible managed
+
 SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
 SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
 SSLHonorCipherOrder     off