themurrayfamily-ssl.conf

#themurrayfamily-ssl.conf

<VirtualHost *:443>
        ServerAdmin chris@belfasttechservices.co.uk
        DocumentRoot /var/www/themurrayfamily-ssl
        ServerName themurrayfamily.me.uk
        ServerAlias www.themurrayfamily.me.uk
        
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
        SSLEngine on
        
        SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
        SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
        #SSLCertificateChainFile /etc/apache2/ssl.crt/server-ca.crt
        
        Protocols h2 http/1.1
        
        # modern configuration, tweak to your needs
        SSLProtocol             all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2
        SSLHonorCipherOrder     off
        SSLSessionTickets       off
        
        <FilesMatch "\.(cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory /usr/lib/cgi-bin>
                SSLOptions +StdEnvVars
        </Directory>
        <Directory /var/www/themurrayfamily-ssl>
            Options -Indexes +FollowSymLinks +MultiViews
            AllowOverride All
            Order allow,deny
            allow from all
            RewriteEngine On
            RewriteBase /
            RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
            RewriteRule ^(.*)$ https://%1/$1 [R=301,L]
        </Directory>
</VirtualHost>