solution

apache/templates/vhost.conf.jj

@@ -0,0 +1,21 @@
+{% for vhost in apache_vhosts %}
+<VirtualHost *:{{ http_port }}>
+       ServerName			{{ vhost.servername }}
+       {% for alias in vhost.serveralias %}
+       ServerAlias   {{ alias }}
+      {% endfor %}
+        DocumentRoot		{{ vhost.documentroot }}
+        CustomLog 		{{ vhost.accesslog }} combined
+        ErrorLog        {{ vhost.errorlog }}
+        <Directory />
+                Options none
+                Allowoverride none
+                Require all denied
+        </Directory>
+
+        <Directory {{ vhost.documentroot }}>
+				Options {{ vhost.documentrootoptions|default( "none" ) }}
+            Require all granted
+        </Directory>
+</VirtualHost>
+{% endfor %}