################################################################
# DOMAIN: DOMAIN-NAME.COM
<virtualhost *:80>
ServerName DOMAIN-NAME.COM
ServerAlias DOMAIN-NAME.COM www.DOMAIN-NAME.COM
ServerAdmin inbox@sysadmin.lk

RewriteEngine on
ReWriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
</virtualhost>

################################################################

<virtualhost *:443>

SSLEngine On
SSLCertificateFile      /etc/letsencrypt/live/DOMAIN-NAME.COM/cert.pem
SSLCertificateKeyFile   /etc/letsencrypt/live/DOMAIN-NAME.COM/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/DOMAIN-NAME.COM/chain.pem

Header always set Public-Key-Pins "pin-sha256=\"5JPXZleh25vWSoxO8owHkTXsyVy+dFWFQGWds5lxEws=\"; max-age=5184000"
SSLProtocol             all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLCipherSuite          ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384

ServerName DOMAIN-NAME.COM
ServerAlias DOMAIN-NAME.COM www.DOMAIN-NAME.COM 
ServerAdmin inbox@sysadmin.lk
DocumentRoot "/opt/web/DOMAIN-NAME.COM"
#php_admin_value open_basedir "/opt/web/DOMAIN-NAME.COM:/var/zpanel/temp/"
ErrorLog "/var/log/DOMAIN-NAME.COM-error.log" 
CustomLog "/var/log/DOMAIN-NAME.COM-access.log" combined
CustomLog "/var/log/DOMAIN-NAME.COM-bandwidth.log" common

<Directory />
Require all granted
Options +FollowSymLinks -Indexes 
AllowOverride All
</Directory>

AddType application/x-httpd-php .php3 .php
ScriptAlias /cgi-bin/ "/_cgi-bin/"

<location /cgi-bin>
AddHandler cgi-script .cgi .pl
Options +ExecCGI -Indexes
</location>
DirectoryIndex index.html index.htm index.php index.asp index.aspx index.jsp index.jspa index.shtml index.shtm
</virtualhost>
# END DOMAIN: DOMAIN-NAME.COM
################################################################