move template into role
configure the webserver jail via proxycommand access