Update role name

defaults/main.yaml

@@ -14,6 +14,8 @@ nextcloud_www_path: '/var/www/nextcloud/'
 nextcloud_ssl: true
 nextcloud_ssl_certificate_path: "/etc/ssl/certs/ssl-cert-snakeoil.pem"
 nextcloud_ssl_key_path: "/etc/ssl/private/ssl-cert-snakeoil.key"
+nextcloud_hsts: true
+nextcloud_hsts_preload: false
 
 # Apache configuration
 

meta/main.yaml

@@ -1,5 +1,6 @@
 ---
 galaxy_info:
+  role_name: nextcloud
   author: Corbin Bartsch
   description: Configure a Debian host for Nextcloud installation
   license: MIT

templates/apache2_ssl_nextcloud.conf.j2

@@ -1,8 +1,13 @@
 # {{ ansible_managed }}
 
 <IfModule mod_ssl.c>
+	<VirtualHost *:80>
+		ServerName {{ nextcloud_subdomain }}.{{ domain_name }}
+		Redirect permanent / https://{{ nextcloud_subdomain }}.{{ domain_name }}/
+	</VirtualHost>
+
 	<VirtualHost *:443>
-	 	ServerName {{ ansible_hostname }}.{{ domain_name }}
+	 	ServerName {{ nextcloud_subdomain }}.{{ domain_name }}
 
 		DocumentRoot {{ nextcloud_www_path }}
 
@@ -26,6 +31,12 @@
 		<FilesMatch "\.php$">
 			SSLOptions +StdEnvVars
 		</FilesMatch>
+
+{% if nextcloud_hsts %}
+		<IfModule mod_headers.c>
+			Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains{% if nextcloud_hsts_preload %}; preload{% endif %}"
+		</IfModule>
+{% endif %}
 	</VirtualHost>
 </IfModule>
 

templates/config.php.j2

@@ -0,0 +1,28 @@
+<?php
+$CONFIG = array (
+  'instanceid' => '',
+  'passwordsalt' => '',
+  'secret' => '',
+  'trusted_domains' => 
+  array (
+    0 => '{{ nextcloud_subdomain }}.{{ domain_name }}',
+  ),
+  'datadirectory' => '{{ nextcloud_data_directory }}',
+  'dbtype' => '{{ nextcloud_db_type }}',
+  'version' => '23.0.3.2',
+  'overwrite.cli.url' => 'http://{{ nextcloud_subdomain }}.{{ domain_name }}',
+  'dbname' => 'nextcloud',
+  'dbhost' => '{{ nextcloud_db_host }}:{{ nextcloud_db_port }}',
+  'dbport' => '',
+  'dbtableprefix' => 'oc_',
+  'dbuser' => '{{ nextcloud_db_user }}',
+  'dbpassword' => '{{ nextcloud_db_pass }}',
+  'installed' => true,
+  'twofactor_enforced' => 'true',
+  'twofactor_enforced_groups' => 
+  array (
+  ),
+  'twofactor_enforced_excluded_groups' => 
+  array (
+  ),
+);