apache-vhost-ssl-redir-le.conf

<VirtualHost *:80>
    ServerName example.com
    ServerAlias www.example.com
    ServerAdmin [email protected]
    DocumentRoot /var/www/html/example.com

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    <Directory "/var/www/html/example.com">
        Options Indexes FollowSymLinks
        AllowOverride none
        Allow from any
    </Directory>

    RewriteEngine on
    RewriteRule !^/.well-known($|/) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</VirtualHost>

<VirtualHost _default_:443>
    ServerName example.com
    ServerAlias www.example.com
    ServerAdmin [email protected]

    DocumentRoot /var/www/html/example.com

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    SSLEngine on
    SSLCertificateFile       {{certdir}}/cert.pem
    SSLCertificateKeyFile    {{certdir}}/privkey.pem
    SSLCertificateChainFile  {{certdir}}/fullchain.pem

    <Directory /var/www/html/example.com>
        Options Indexes FollowSymLinks
        AllowOverride none
        Allow from any
    </Directory>
</VirtualHost>

# vim: syntax=apache:ts=4:sw=4:sts=4:sr:et

yeah, and {{certdir}} is not at all an indication that this was originally a jinja template :P