vhost-config

<VirtualHost *:443>
        ServerName domain.com

        ServerAdmin [email protected]

        DocumentRoot /var/www/domain.com/htdocs/public_html
        DirectoryIndex index.html
        DirectoryIndex index.php
        <Directory "/var/www/domain.com/htdocs/public_html">
                AllowOverride all
		        Options All -Indexes
                Require all granted
        </Directory>

	RewriteEngine on
	RewriteCond %{HTTPS} !on
	RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
	<IfModule mod_headers.c>
	    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
	</IfModule>

        <IfModule mod_deflate.c>
            # Compress HTML, CSS, JavaScript, Text, XML and fonts
            AddOutputFilterByType DEFLATE application/javascript
            AddOutputFilterByType DEFLATE application/rss+xml
            AddOutputFilterByType DEFLATE application/vnd.ms-fontobject
            AddOutputFilterByType DEFLATE application/x-font
            AddOutputFilterByType DEFLATE application/x-font-opentype
            AddOutputFilterByType DEFLATE application/x-font-otf
            AddOutputFilterByType DEFLATE application/x-font-truetype
            AddOutputFilterByType DEFLATE application/x-font-ttf
            AddOutputFilterByType DEFLATE application/x-javascript
            AddOutputFilterByType DEFLATE application/xhtml+xml
            AddOutputFilterByType DEFLATE application/xml
            AddOutputFilterByType DEFLATE font/opentype
            AddOutputFilterByType DEFLATE font/otf
            AddOutputFilterByType DEFLATE font/ttf
            AddOutputFilterByType DEFLATE image/svg+xml
            AddOutputFilterByType DEFLATE image/x-icon
            AddOutputFilterByType DEFLATE text/css
            AddOutputFilterByType DEFLATE text/html
            AddOutputFilterByType DEFLATE text/javascript
            AddOutputFilterByType DEFLATE text/plain
            AddOutputFilterByType DEFLATE text/xml
        </IfModule>

        <IfModule mod_expires.c>
            ExpiresActive On

            # Images
            ExpiresByType image/jpeg "access plus 1 year"
            ExpiresByType image/gif "access plus 1 year"
            ExpiresByType image/png "access plus 1 year"
            ExpiresByType image/webp "access plus 1 year"
            ExpiresByType image/svg+xml "access plus 1 year"
            ExpiresByType image/x-icon "access plus 1 year"

            # Video
            ExpiresByType video/mp4 "access plus 1 year"
            ExpiresByType video/mpeg "access plus 1 year"

            # CSS, JavaScript
            ExpiresByType text/css "access plus 1 month"
            ExpiresByType text/javascript "access plus 1 month"
            ExpiresByType application/javascript "access plus 1 month"

            # Others
            ExpiresByType application/pdf "access plus 1 month"
            ExpiresByType application/x-shockwave-flash "access plus 1 month"
        </IfModule>

	SSLEngine on
	SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
	SSLHonorCipherOrder On
	SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

	SSLCertificateFile /etc/ssl/domain.com/cert.pem
	SSLCertificateKeyFile /etc/ssl/domain.com/privkey.pem
	SSLCertificateChainFile /etc/ssl/domain.com/chain.pem

        Protocols h2 http/1.1

	LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
	LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
	SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
	CustomLog "/var/www/domain.com/logs/ssl_access_log" combined env=!forwarded
	CustomLog "/var/www/domain.com/logs/ssl_access_log" proxy env=forwarded
        ErrorLog /var/www/domain.com/logs/ssl_error_log
</VirtualHost>