<VirtualHost *:80>
SuexecUserGroup "#1023" "#1018"
ServerName office.mydomain.com
ServerAlias www.office.mydomain.com
ServerAlias webmail.office.mydomain.com
ServerAlias admin.office.mydomain.com
DocumentRoot /home/mydomain.com/domains/office.mydomain.com/public_html
ErrorLog /var/log/virtualmin/office.mydomain.com_error_log
CustomLog /var/log/virtualmin/office.mydomain.com_access_log combined
ScriptAlias /cgi-bin/ /home/mydomain.com/domains/office.mydomain.com/cgi-bin/
DirectoryIndex index.html index.htm index.php index.php4 index.php5
<Directory /home/mydomain.com/domains/office.mydomain.com/public_html>
Options -Indexes +IncludesNOEXEC +SymLinksIfOwnerMatch +ExecCGI
allow from all
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
Require all granted
AddType application/x-httpd-php .php
AddHandler fcgid-script .php
AddHandler fcgid-script .php5
AddHandler fcgid-script .php7.0
FCGIWrapper /home/mydomain.com/domains/office.mydomain.com/fcgi-bin/php7.0.fcgi .php
FCGIWrapper /home/mydomain.com/domains/office.mydomain.com/fcgi-bin/php5.fcgi .php5
FCGIWrapper /home/mydomain.com/domains/office.mydomain.com/fcgi-bin/php7.0.fcgi .php7.0
</Directory>
<Directory /home/mydomain.com/domains/office.mydomain.com/cgi-bin>
allow from all
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
Require all granted
</Directory>
RewriteEngine on
RewriteCond %{HTTP_HOST} =webmail.office.mydomain.com
RewriteRule ^(.*) https://office.mydomain.com:20000/ [R]
RewriteCond %{HTTP_HOST} =admin.office.mydomain.com
RewriteRule ^(.*) https://office.mydomain.com:10000/ [R]
RemoveHandler .php
RemoveHandler .php5
RemoveHandler .php7.0
FcgidMaxRequestLen 1073741824
IPCCommTimeout 9999
</VirtualHost>
<VirtualHost *:443>
		ServerName office.mydomain.com

			# Encoded slashes need to be allowed
			AllowEncodedSlashes NoDecode

		# SSL configuration, using Lets Encrypt!
			SSLEngine on
			SSLCertificateFile  	/home/mydomain.com/domains/office.mydomain.com/ssl.cert
			SSLCertificateChainFile  	/home/mydomain.com/domains/office.mydomain.com/ssl.ca
			SSLCertificateKeyFile  	/home/mydomain.com/domains/office.mydomain.com/ssl.key
			SSLProtocol             all -SSLv2 -SSLv3
			SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
			SSLHonorCipherOrder     on

			# Encoded slashes need to be allowed
			AllowEncodedSlashes NoDecode

			# Container uses a unique non-signed certificate
			SSLProxyEngine On
			SSLProxyVerify None
			SSLProxyCheckPeerCN Off
			SSLProxyCheckPeerName Off

			# keep the host
			ProxyPreserveHost On

			# static html, js, images, etc. served from loolwsd
			# loleaflet is the client part of LibreOffice Online
			ProxyPass           /loleaflet https://127.0.0.1:9980/loleaflet retry=0
			ProxyPassReverse    /loleaflet https://127.0.0.1:9980/loleaflet

			# WOPI discovery URL
			ProxyPass           /hosting/discovery https://127.0.0.1:9980/hosting/discovery retry=0
			ProxyPassReverse    /hosting/discovery https://127.0.0.1:9980/hosting/discovery

			# Main websocket
			ProxyPassMatch "/lool/(.*)/ws$" wss://127.0.0.1:9980/lool/$1/ws nocanon

			# Admin Console websocket
			ProxyPass   /lool/adminws wss://127.0.0.1:9980/lool/adminws

			# Download as, Fullscreen presentation and Image upload operations
			ProxyPass           /lool https://127.0.0.1:9980/lool
			ProxyPassReverse    /lool https://127.0.0.1:9980/lool
			</VirtualHost>