setup copr-fe to use https

selfigned certs, not stored here.
It will be replaced in matter of days by properly signed certs, which we store in private repo

files/copr/fe/httpd/coprs.conf

@@ -18,3 +18,28 @@ WSGISocketPrefix /var/run/wsgi
 	Require all granted
     </Directory>
 </VirtualHost>
+
+<VirtualHost *:443>
+    SSLEngine on
+    SSLProtocol all -SSLv2
+    #optimeize on speed
+    SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
+    SSLHonorCipherOrder on
+
+    SSLCertificateFile /etc/pki/tls/ca.crt
+    SSLCertificateKeyFile /etc/pki/tls/private/ca.key
+    ServerName copr-fe.cloud.fedoraproject.org:443
+
+    WSGIPassAuthorization On
+    #WSGIDaemonProcess 127.0.0.1 user=copr-fe group=copr-fe threads=5
+    WSGIScriptAlias / /usr/share/copr/coprs_frontend/application
+    WSGIProcessGroup 127.0.0.1
+
+    ErrorLog logs/error_coprs
+    CustomLog logs/access_coprs common
+
+    <Directory /usr/share/copr>
+        WSGIApplicationGroup %{GLOBAL}
+        Require all granted
+    </Directory>
+</VirtualHost>

playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml

@@ -47,6 +47,7 @@
     - postgresql-server
     - bash-completion
     - fail2ban
+    - mod_ssl
     tags:
     - packages