deb/apache-letsencrypt.bash
changeset 34 68975e7d5237
parent 33 7b602d7f98cd
child 35 b524ac24e926
--- a/deb/apache-letsencrypt.bash	Thu May 02 15:46:52 2024 +0300
+++ b/deb/apache-letsencrypt.bash	Thu May 02 15:47:37 2024 +0300
@@ -30,3 +30,14 @@
 
 # systemctl reload apache2
 # sudo certbot --apache --agree-tos --redirect -m youremail@email.com -d domainname.com -d www.domainname.com
+
+cat >/srv/www/letsencrypt/apache-ssl-options.conf <<EOF
+SSLEngine on
+SSLProtocol             all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+SSLOptions +StrictRequire
+
+# Add vhost name to log entries:
+LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" vhost_combined
+LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
+EOF
+