apache2

gistfile1.txt

#apache2.conf

HostnameLookups off
Timeout 300
AccessFileName  .htaccess

ServerTokens Prod
ServerSignature Off
TraceEnable Off
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 5

AddDefaultCharset UTF-8
EnableSendfile on

#security.conf

add_header Strict-Transport-Security "max-age=31536000;includeSubdomains; preload" always;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
add_header X-XSS-Protection "1";
add_header Referrer-Policy "same-origin";
add_header Expect-CT "max-age=86400, enforce";



<VirtualHost *:80>
    ServerAlias *
    DocumentRoot /home/vhost/xenioss.com/app/public

    ErrorLog /var/log/apache2/xenioss-error.log
    CustomLog /var/log/apache2/xenioss-access.log combined

        Redirect "/" "https://www.example.com/"
</VirtualHost>

<VirtualHost *:443>

	<Directory /home/vhost/xenioss.com/app/public>
		AllowOverride All
		Allow from all
		Require all granted
	</Directory>

# General setup for the virtual host, inherited from global configuration
DirectoryIndex  index.php
DocumentRoot    /home/vhost/xenioss.com/app/public
ServerAlias     *
#ServerName www.example.com:443

# Use separate log files for the SSL virtual host; note that LogLevel
# is not inherited from httpd.conf.

ErrorLog var/log/apache2//ssl_error_log
TransferLog /var/log/apache2/ssl_access_log
CustomLog /var/log/apache2/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
LogLevel warn

#   SSL Engine Switch:
#   Enable/Disable SSL for this virtual host.
SSLEngine on
SSLCertificateFile /etc/nginx/ssl/star_xenioss_com-bundle.pem
SSLCertificateKeyFile /etc/nginx/ssl/star_xenioss_com-key.pem
SSLCertificateChainFile /etc/nginx/ssl/star_xenioss_com-trust.pem

</VirtualHost>