Define __TLS_HOST Define _TLS_HOST ${_HOST} Define __TLS_CERT_CHAIN Define __TLS_KEY Define _TLS_CERT_CHAIN /var/lib/dehydrated/certs/${_TLS_HOST}/fullchain.pem Define _TLS_KEY /var/lib/dehydrated/certs/${_TLS_HOST}/privkey.pem Define _TLS_CERT_CHAIN /etc/ssl/shared/${_TLS_HOST}.chain.pem Define _TLS_KEY /etc/ssl/private/${_TLS_HOST}.key RedirectMatch permanent ^(?!/.well-known/)(.*) https://${_HOST}$1 GnuTLSEnable on GnuTLSCertificateFile ${_TLS_CERT_CHAIN} GnuTLSKeyFile ${_TLS_KEY} GnuTLSOCSPStapling on GnuTLSOCSPResponseFile ${_OCSP_RESPONSE} GnuTLSOCSPStapling off SSLEngine on SSLCertificateFile ${_TLS_CERT_CHAIN} SSLCertificateKeyFile ${_TLS_KEY} SSLOptions +StdEnvVars SSLOptions +StdEnvVars Undefine _TLS_HOST Undefine __TLS_HOST Undefine _TLS_CERT_CHAIN Undefine __TLS_CERT_CHAIN Undefine _TLS_KEY Undefine __TLS_KEY