# Added to mitigate CVE-2017-8295 vulnerability
UseCanonicalName On

<VirtualHost *:80>
	ServerAdmin webmaster@localhost
	ServerName borealis.agency


	DocumentRoot /var/www/novi

	<Directory /var/www/novi/>
		Options FollowSymLinks
		AllowOverride All
	</Directory>

        #<Directory /var/www/>
        #        Options Indexes FollowSymLinks MultiViews
        #        AllowOverride None
        #        Order allow,deny
        #        allow from all
        #</Directory>

	ErrorLog ${APACHE_LOG_DIR}/novi.borealis.biz-error.log
	CustomLog ${APACHE_LOG_DIR}/novi.borealis.biz-access.log combined



RewriteEngine on
RewriteCond %{SERVER_NAME} =borealis.agency
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

<VirtualHost *:443>
        SSLEngine on

        #   A self-signed (snakeoil) certificate can be created by installing
        #   the ssl-cert package. See
        #   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
        #   If both key and certificate are stored in the same file, only the
        #   SSLCertificateFile directive is needed.
        #SSLCertificateFile    /etc/ssl/private/tokic.hr.pem
        #SSLCertificateKeyFile /etc/ssl/private/tokic.hr.key

	# star *
	
	
	# ev
	#SSLCertificateFile    /etc/ssl/private/ev_tokic_hr.crt
        #SSLCertificateKeyFile /etc/ssl/private/ev_tokic_hr.key
	#SSLCertificateChainFile /etc/ssl/private/ev_DigiCertCA.crt

	ServerAdmin    webmaster@localhost
        ServerName borealis.agency


	

	DocumentRoot /var/www/novi

	<Directory /var/www/novi/>
		Options FollowSymLinks
		AllowOverride All
	</Directory>

	# using HSTS, also known as Strict Transport Security
	#Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"

	ErrorLog ${APACHE_LOG_DIR}/novi.borealis.biz-error-ssl.log

        # mode rewrite log
        #RewriteLog ${APACHE_LOG_DIR}/novi.borealis.biz-rewrite-ssl.log 
        #RewriteLogLevel 2

	# Possible values include: debug, info, notice, warn, error, crit,
	# alert, emerg.
	LogLevel warn

	CustomLog ${APACHE_LOG_DIR}/novi.borealis.biz-access-ssl.log combined

        <IfModule mod_headers.c>
                Header always set X-Robots-Tag "noindex, noarchive, nosnippet, noimageindex, noodp, nofollow"
        </IfModule>

			Include /etc/letsencrypt/options-ssl-apache.conf
		SSLCertificateFile	/etc/letsencrypt/live/www.borealis.biz/fullchain.pem
		SSLCertificateKeyFile /etc/letsencrypt/live/www.borealis.biz/privkey.pem
		
		
</VirtualHost>