#----------------------------------------------------------------
# WARNING: This file is automatically created by webconfig.
#----------------------------------------------------------------


# Authentication mechanism
DefineExternalAuth pwauth pipe /usr/bin/pwauth
DefineExternalGroup pwauth pipe /usr/bin/unixgroup

# -----------------------------------------------#
# Web Site
# -----------------------------------------------#

<VirtualHost *:443>
	ServerName makkink.eu
	ServerAlias *.makkink.eu
	DocumentRoot /var/www/html
	ErrorLog /var/log/httpd/error_log
	CustomLog /var/log/httpd/access_log combined
	SSLEngine on
	SSLCertificateFile /etc/letsencrypt/live/www.makkink.eu/cert.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/www.makkink.eu/privkey.pem
	SSLCertificateChainFile /etc/letsencrypt/live/www.makkink.eu/chain.pem
	# No weak export crypto allowed
	SSLHonorCipherOrder on
	SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
	SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!3DES:!aNULL:!MD5
	SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
</VirtualHost>