# Added to mitigate CVE-2017-8295 vulnerability
UseCanonicalName On

<VirtualHost *:80>
	ServerAdmin webmaster@localhost
	ServerName shoetique.hr
	ServerAlias www.shoetique.hr


	DocumentRoot /var/www/shoetique

	<Directory /var/www/shoetique/>
		Options FollowSymLinks
		AllowOverride All
	</Directory>

        #<Directory /var/www/>
        #        Options Indexes FollowSymLinks MultiViews
        #        AllowOverride None
        #        Order allow,deny
        #        allow from all
        #</Directory>

	ErrorLog ${APACHE_LOG_DIR}/shoetique.hr-error.log
	CustomLog ${APACHE_LOG_DIR}/shoetique.hr-access.log combined



RewriteEngine on
RewriteCond %{SERVER_NAME} =shoetique.hr
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

<VirtualHost *:443>
        SSLEngine on

        #   A self-signed (snakeoil) certificate can be created by installing
        #   the ssl-cert package. See
        #   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.
        #   If both key and certificate are stored in the same file, only the
        #   SSLCertificateFile directive is needed.
        #SSLCertificateFile    /etc/ssl/private/tokic.hr.pem
        #SSLCertificateKeyFile /etc/ssl/private/tokic.hr.key

	# star *
	
	# ev
	#SSLCertificateFile    /etc/ssl/private/ev_tokic_hr.crt
        #SSLCertificateKeyFile /etc/ssl/private/ev_tokic_hr.key
	#SSLCertificateChainFile /etc/ssl/private/ev_DigiCertCA.crt

	ServerAdmin    webmaster@localhost
        ServerName shoetique.hr
		ServerAlias www.shoetique.hr

	

	DocumentRoot /var/www/shoetique

	<Directory /var/www/shoetique/>
		Options FollowSymLinks
		AllowOverride All
	</Directory>

	# using HSTS, also known as Strict Transport Security
	#Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"

	ErrorLog ${APACHE_LOG_DIR}/shoetique.hr-error-ssl.log

        # mode rewrite log
        #RewriteLog ${APACHE_LOG_DIR}/shoetique.hr-rewrite-ssl.log 
        #RewriteLogLevel 2

	# Possible values include: debug, info, notice, warn, error, crit,
	# alert, emerg.
	LogLevel warn

	CustomLog ${APACHE_LOG_DIR}/shoetique.hr-access-ssl.log combined

        <IfModule mod_headers.c>
                Header always set X-Robots-Tag "noindex, noarchive, nosnippet, noimageindex, noodp, nofollow"
        </IfModule>
			Include /etc/letsencrypt/options-ssl-apache.conf
		ServerAlias	www.shoetique.hr
		SSLCertificateFile /etc/letsencrypt/live/shoetique.hr/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/shoetique.hr/privkey.pem
</VirtualHost>