--- a/deb/apache-letsencrypt.bash Thu May 02 15:46:52 2024 +0300
+++ b/deb/apache-letsencrypt.bash Thu May 02 15:47:37 2024 +0300
@@ -30,3 +30,14 @@
# systemctl reload apache2
# sudo certbot --apache --agree-tos --redirect -m youremail@email.com -d domainname.com -d www.domainname.com
+
+cat >/srv/www/letsencrypt/apache-ssl-options.conf <<EOF
+SSLEngine on
+SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+SSLOptions +StrictRequire
+
+# Add vhost name to log entries:
+LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" vhost_combined
+LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
+EOF
+