ansible/roles/webserver/files/etc/apache2/sites-available/ftp.thunix.net.conf

<VirtualHost *:80>
    ServerAdmin webmaster@thunix.net
    ServerName ftp.thunix.net
    ServerAlias ftp.thunixme5v4rnoby.onion
    DocumentRoot /var/ftp
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    <Directorymatch "^/.*/\.git/">
                Order deny,allow
                Deny from all
    </Directorymatch>
    <Directory /var/ftp>
      IndexOptions FancyIndexing NameWidth=* FoldersFirst ScanHTMLTitles DescriptionWidth=*
      HeaderName HEADER.html
      ReadmeName README.html
      AllowOverride FileInfo Indexes
      Options Indexes SymLinksIfOwnerMatch FollowSymLinks
      ErrorDocument 404 default
    </Directory>
</VirtualHost>
<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerAdmin webmaster@thunix.net
    ServerName ftp.thunix.net
    DocumentRoot /var/ftp
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    <Directorymatch "^/.*/\.git/">
                Order deny,allow
                Deny from all
        </Directorymatch>
    <Directory /var/ftp>
      IndexOptions FancyIndexing NameWidth=* FoldersFirst ScanHTMLTitles DescriptionWidth=*
      HeaderName HEADER.html
      ReadmeName README.html
      AllowOverride FileInfo Indexes
      Options Indexes SymLinksIfOwnerMatch FollowSymLinks
      ErrorDocument 404 default
    </Directory>

Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/ftp.thunix.net/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/ftp.thunix.net/privkey.pem
</VirtualHost>
</IfModule>