vHost SSL

<IfModule mod_ssl.c>

SSLStaplingCache shmcb:/tmp/stapling_cache(128000)

<VirtualHost *:443>

ServerAdmin webmaster@localhost
DocumentRoot /var/www/html

###
Header always set Referrer-Policy "same-origin"
Header set Strict-Transport-Security "max-age=15768000; includeSubdomains;"
Header set X-Frame-Options: DENY
Header set X-XSS-Protection "1; mode=block"
Header set X-Content-Type-Options: nosniff
Header set Content-Security-Policy "default-src 'self';"
Header always set Public-Key-Pins "pin-sha256=\"YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=\"; pin-sha256=\"C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M=\"; pin-sha256=\"sRHdihwgkaib1P1gxX8HFszlD+7/gTfNvuAybgLPNis=\"; pin-sha256=\"za7Ua9rgoG4hdw2IRNSGzHldSpDLUQLGyNLEvhofpD8=\"; pin-sha256=\"2mwKohR7EVlZtxlB9lNcneNZCWkwopiiUHwygomeoVc=\"; max-age=864000; includeSubdomains"
###

ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined

#Include conf-available/serve-cgi-bin.conf

SSLCertificateFile /etc/letsencrypt/live/rurdos.link-0001/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/rurdos.link-0001/privkey.pem

SSLCACertificateFile /etc/letsencrypt/live/rurdos.link-0001/cabundle.pem
SSLUseStapling on

Include /etc/letsencrypt/options-ssl-apache.conf

ServerName rurdos.link

</VirtualHost>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

</IfModule>