Define __TLSHOST
Define _TLSHOST ${_HOST}
Define __TLS_CERT_CHAIN
Define __TLS_KEY
Define _TLS_CERT_CHAIN /var/lib/dehydrated/certs/${_TLSHOST}/fullchain.pem
Define _TLS_KEY /var/lib/dehydrated/certs/${_TLSHOST}/privkey.pem
RedirectMatch permanent ^(?!/.well-known/)(.*) https://${_HOST}$1
GnuTLSEnable on
GnuTLSCertificateFile ${_TLS_CERT_CHAIN}
GnuTLSKeyFile ${_TLS_KEY}
GnuTLSOCSPStapling on
GnuTLSOCSPResponseFile ${_OCSP_RESPONSE}
GnuTLSOCSPStapling off
SSLEngine on
SSLCertificateFile ${_TLS_CERT_CHAIN}
SSLCertificateKeyFile ${_TLS_KEY}
SSLOptions +StdEnvVars
SSLOptions +StdEnvVars
Undefine _TLSHOST
Undefine __TLSHOST
Undefine _TLS_CERT_CHAIN
Undefine __TLS_CERT_CHAIN
Undefine _TLS_KEY
Undefine __TLS_KEY