From 56dd63916925627773cb2cf590f1c8191470dccc Mon Sep 17 00:00:00 2001
From: Joey Hess <joey@kitenet.net>
Date: Sun, 13 Apr 2014 21:04:34 -0400
Subject: propellor spin

---
 Propellor/Property/Apache.hs | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'Propellor/Property/Apache.hs')

diff --git a/Propellor/Property/Apache.hs b/Propellor/Property/Apache.hs
index eab87862..f45ef9df 100644
--- a/Propellor/Property/Apache.hs
+++ b/Propellor/Property/Apache.hs
@@ -50,3 +50,13 @@ restarted = cmdProperty "service" ["apache2", "restart"]
 
 reloaded :: Property
 reloaded = Service.reloaded "apache2"
+
+-- | Configure apache to use SNI to differentiate between
+-- https hosts.
+multiSSL :: Property
+multiSSL = "/etc/apache2/conf.d/ssl" `File.hasContent`
+	[ "NameVirtualHost *:443"
+	, "SSLStrictSNIVHostCheck off"
+	]
+	`describe` "apache SNI enabled"
+	`onChange` reloaded
-- 
cgit v1.3-2-g0d8e