File vhost-ssl.conf of Package jsj-installtools

<VirtualHost *:80>
    ServerAdmin vmadmin@local
    ServerName HOSTNAME.DOMAINNAME
    DocumentRoot /srv/www/HOSTNAME/htdocs/
    ErrorLog /var/log/apache2/HOSTNAME-error_log
    CustomLog /var/log/apache2/HOSTNAME-access_log combined
    HostnameLookups Off
    UseCanonicalName Off
    ServerSignature On
    <ifmodule mod_rewrite.c>
        RewriteEngine On
        RewriteCond %{HTTPS} off
        RewriteCond %{REQUEST_URI} !^/\.well\-known/acme-challenge/
        RewriteRule ^.*$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,QSA,L]
    </ifmodule>
    <Directory "/srv/www/HOSTNAME/htdocs">
        Options -Indexes -FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>
</VirtualHost>
<IfDefine SSL>
<IfDefine !NOSSL>
<VirtualHost *:443>
    ServerName HOSTNAME.DOMAINNAME
    DocumentRoot /srv/www/HOSTNAME/htdocs/
    ErrorLog /var/log/apache2/HOSTNAME-error_log
    CustomLog /var/log/apache2/HOSTNAME-access_log combined
    CustomLog /var/log/apache2/ssl_request_log   ssl_combined
    SSLEngine on
    SSLOpenSSLConfCmd DHParameters "/etc/ssl/dhparam.pem"
    SSLOpenSSLConfCmd       Curves X25519:prime256v1:secp384r1
    SSLHonorCipherOrder off

### SSL configuration https://ssl-config.mozilla.org/:
    ### choose!
    ### next 2 lines Mozilla configuration intermediate
    SSLProtocol -all +TLSv1.2 +TLSv1.3
    SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305
    ### next 2 lines Mozilla configuration modern
    #SSLProtocol             -all +TLSv1.3
    #SSLHonorCipherOrder     off
    ### end: SSL configuration

# enable HTTP/2, if available
    Protocols h2 http/1.1
    <IfModule mod_headers.c>
        Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
        Header always set X-Frame-Options SAMEORIGIN
        Header always set X-Content-Type-Options nosniff
    </IfModule>
    # Requires Apache >= 2.4
    SSLCompression off
    # Requires Apache >= 2.4.11
    SSLSessionTickets Off
    SSLCertificateFile /etc/apache2/ssl.crt/HOSTNAME.DOMAINNAME.fullchain.pem
    SSLCertificateKeyFile /etc/apache2/ssl.key/HOSTNAME.DOMAINNAME.key
    <Files ~ "\.(cgi|shtml|phtml|php3?)$">
        SSLOptions +StdEnvVars
    </Files>
    <Directory "/srv/www/cgi-bin">
        AllowOverride None
        Options +ExecCGI -Includes
        SSLOptions +StdEnvVars
        Require all granted
    </Directory>
    <IfModule mod_userdir.c>
        UserDir public_html
        Include /etc/apache2/mod_userdir.conf
    </IfModule>
    <Directory "/srv/www/HOSTNAME/htdocs">
        Options -Indexes -FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>
    Alias /PM/ /srv/www/htdocs/phpMyAdmin/
</VirtualHost>                                  
</IfDefine>
</IfDefine>