ServerName nycki.net ServerAlias nycki.blokus.hatspace.net SSLEngine on Include /etc/letsencrypt/options-ssl-apache.conf SSLCertificateFile /etc/letsencrypt/live/nycki.net/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/nycki.net/privkey.pem # https://palmure.fr/blog.html#default-https-but-only-for-recent-browsers #Header always add Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload;" # # # Header always add Vary: Upgrade-Insecure-Requests # Redirect / https://nycki.net/ # # DocumentRoot /data/nycki.net/site #DirectoryIndex index.html ErrorDocument 404 /404.html RewriteEngine on LogLevel alert rewrite:trace3 RewriteCond "%{DOCUMENT_ROOT}/%{REQUEST_URI}" -f [OR] RewriteCond "%{DOCUMENT_ROOT}/%{REQUEST_URI}" -d RewriteRule "^(.+)" "%{DOCUMENT_ROOT}/$1" [L] Options FollowSymLinks MultiViews Require all granted # If file isn't in repo, fall back on public_html Define public_html "/home/nycki/public_html" RewriteCond "${public_html}%{REQUEST_URI}" -f [OR] RewriteCond "${public_html}%{REQUEST_URI}" -d RewriteRule "^(.+)" "${public_html}$1" [L] Options FollowSymLinks Require all granted