put virtualenv activation during build in comment. That means that for the moment the build machine must be provisionned beforehand, or ansible must be available globally
<Location /ldap-status>
SetHandler ldap-status
<%- if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
Require ip 127.0.0.1 ::1
<%- else -%>
Order deny,allow
Deny from all
Allow from 127.0.0.1 ::1
Satisfy all
<%- end -%>
</Location>