RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]

# add a trailing slash to /wp-admin
RewriteRule ^([_0-9a-zA-Z-]+/)?wp-admin$ $1wp-admin/ [R=301,L]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
RewriteRule ^([_0-9a-zA-Z-]+/)?(wp-(content|admin|includes).*) $2 [L]
RewriteRule ^([_0-9a-zA-Z-]+/)?(.*.php)$ $2 [L]
RewriteRule . index.php [L]

<VirtualHost *:443>
  ServerName www.site1.com
  ServerAlias site1.com

  SSLEngine on
  SSLCertificateFile "/usr/local/etc/letsencrypt/live/site1.com/cert.pem"
  SSLCertificateKeyFile "/usr/local/etc/letsencrypt/live/site1.com/privkey.pem"
  SSLCertificateChainFile "/usr/local/etc/letsencrypt/live/site1.com/fullchain.pem"

  <FilesMatch ".(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
  </FilesMatch>

  BrowserMatch "MSIE [2-5]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  CustomLog "/var/log/httpd-ssl_request.log" "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"

  <Directory "/usr/local/www/apache24/data/">
    Options Indexes FollowSymLinks MultiViews
    AllowOverride All
    Require all granted
  </Directory>

  ErrorLog "/var/log/site1.com.ssl-error.log"
  CustomLog "/var/log/site1.com.ssl-access_log" combined
</VirtualHost>

<VirtualHost *:80>
   ServerName www.site1.com
   ServerAlias site1.com

   Redirect permanent / https://site1.com/
</VirtualHost>