<VirtualHost *:80>
    ServerName demo.walktheline.fr
    Redirect permanent / https://demo.walktheline.fr/

    ErrorLog ${APACHE_LOG_DIR}/demo.walktheline.fr-error.log
    CustomLog ${APACHE_LOG_DIR}/demo.walktheline.fr-access.log combined
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName demo.walktheline.fr
    ServerAdmin webmaster@localhost

    DocumentRoot /var/www/html/demo-wtl/public

    <Directory /var/www/html/demo-wtl/public>
        AllowOverride All
        Options -Indexes
        Require all granted
        FallbackResource /index.php
    </Directory>

    ErrorLog ${APACHE_LOG_DIR}/demo.walktheline.fr-error.log
    CustomLog ${APACHE_LOG_DIR}/demo.walktheline.fr-access.log combined

    <IfModule mod_headers.c>
        Header always set X-Content-Type-Options "nosniff"
        Header always set X-Frame-Options "SAMEORIGIN"
        Header always set Referrer-Policy "strict-origin-when-cross-origin"
        Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
        Header always set Strict-Transport-Security "max-age=31536000"
    </IfModule>

    SSLCertificateFile /etc/letsencrypt/live/demo.walktheline.fr/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/demo.walktheline.fr/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>
