<IfModule mod_ssl.c>

<VirtualHost *:80>
        ServerName mysite.myserver.com
        Redirect permanent / https://mysite.myserver.com
</VirtualHost>

<VirtualHost *:443>
	ServerAdmin admin@example.com

	DocumentRoot /srv/http/stage/mysite/public_html
        ServerName mysite.myserver.com
        ServerAlias www.mysite.myserver.com

	<Directory /srv/http/stage/mysite/public_html>
		Options +FollowSymLinks
		AllowOverride All
		Order allow,deny
		allow from all
                Require all granted
	</Directory>

	# Possible values include: debug, info, notice, warn, error, crit,
	# alert, emerg.
	LogLevel warn
	ErrorLog ${APACHE_LOG_DIR}/mysite.myserver.com.error.log
	CustomLog ${APACHE_LOG_DIR}/mysite.myserver.com.access.log combined

        SSLEngine on
        SSLCertificateFile /etc/ssl/local/mysite.com/mysite.com.pem
        SSLCertificateKeyFile /etc/ssl/private/mysite.com.key
        SSLCertificateChainFile /etc/ssl/local/mysite.com/ca-chain.crt
        SSLCACertificateFile /etc/ssl/local/mysite.com/ca-bundle.crt

        <FilesMatch "\.(cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory /usr/lib/cgi-bin>
                SSLOptions +StdEnvVars
        </Directory>

        BrowserMatch "MSIE [2-6]" \
                nokeepalive ssl-unclean-shutdown \
                downgrade-1.0 force-response-1.0
        # MSIE 7 and newer should be able to use keepalive
        BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

</VirtualHost>
</IfModule>