# HTTPS for PSC Testing — place in /etc/apache2/sites-available/ and: sudo a2ensite psctesting.seethruit.net-le-ssl
<IfModule mod_ssl.c>
<VirtualHost *:443>
  ServerName psctesting.seethruit.net
  DocumentRoot /srv/www/seethruit/psctesting.seethruit.net/public

  <Directory /srv/www/seethruit/psctesting.seethruit.net/public>
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
  </Directory>

  ErrorLog ${APACHE_LOG_DIR}/psctesting_seethruit_ssl_error.log
  CustomLog ${APACHE_LOG_DIR}/psctesting_seethruit_ssl_access.log combined

  Header always set X-Content-Type-Options "nosniff"
  Header always set X-Frame-Options "SAMEORIGIN"
  Header always set Referrer-Policy "strict-origin-when-cross-origin"
  Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()"

  Include /etc/letsencrypt/options-ssl-apache.conf
  SSLCertificateFile /etc/letsencrypt/live/psctesting.seethruit.net/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/psctesting.seethruit.net/privkey.pem
</VirtualHost>
</IfModule>
