ansible/roles/webserver/files/etc/apache2/sites-available/ftp.thunix.net.conf

<VirtualHost *:80>
    ServerAdmin webmaster@thunix.net
    ServerName ftp.thunix.net
    ServerAlias ftp.thunixme5v4rnoby.onion
    DocumentRoot /var/www/ftp.thunix.cf
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    <Directorymatch "^/.*/\.git/">
                Order deny,allow
                Deny from all
    </Directorymatch>
    <Directory /var/www/ftp.thunix.cf>
      IndexOptions FancyIndexing NameWidth=* FoldersFirst ScanHTMLTitles DescriptionWidth=*
      HeaderName HEADER.html
      ReadmeName README.html
      AllowOverride FileInfo Indexes
      Options Indexes SymLinksIfOwnerMatch FollowSymLinks
      ErrorDocument 404 default
    </Directory>
</VirtualHost>

    <IfModule mod_ssl.c>
    <VirtualHost *:443>
    ServerAdmin webmaster@thunix.net
    ServerName ftp.thunix.cf
    DocumentRoot /var/www/ftp.thunix.cf
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    <Directorymatch "^/.*/\.git/">
                Order deny,allow
                Deny from all
    </Directorymatch>
    <Directory /var/www/ftp.thunix.cf>
      IndexOptions FancyIndexing NameWidth=* FoldersFirst ScanHTMLTitles DescriptionWidth=*
      HeaderName HEADER.html
      ReadmeName README.html
      AllowOverride FileInfo Indexes
      Options Indexes SymLinksIfOwnerMatch FollowSymLinks
      ErrorDocument 404 default
    </Directory>
    SSLCertificateFile /etc/letsencrypt/live/ftp.thunix.cf/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/ftp.thunix.cf/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
    </VirtualHost>
    </IfModule>