Ansible Galaxy role cesnet.apache_tls that installs Apache HTTPD and configures TLS (Transport Layer Security) correctly to pass the SSLLabs Server Test with A+ rating.
It does not set up any web sites.
- apache_tls_ocsp_stapling - whether to enable OCSP stapling, default is false
- hosts: all
roles:
- role: cesnet.apache_tls
vars:
apache_tls_ocsp_stapling: true