<IfModule mod_ssl.c>
    <VirtualHost *:443>

    ServerName your.fq.dn
    DocumentRoot "/var/www/nextcloud/"
    ServerAdmin webmaster@yourdomain.com

    SSLEngine on
    SSLCertificateFile      /path/to/ssl/cert
    SSLCertificateKeyFile   /path/to/private/key
    SSLCertificateChainFile /path/to/chain/cert

    # Uncomment the following directive when using client certificate authentication
    #SSLCACertificateFile

    SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-G56:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
    SSLHonorCipherOrder     on
    SSLCompression          off
    SSLSessionTickets       off

    # HSTS (mod_headers is required) (15768000 seconds = 6 months)
    Header always set Strict-Transport-Security "max-age=15768000"

    <Directory /var/www/nextcloud/>
        Options +FollowSymlinks
        AllowOverride All

        <IfModule mod_dav.c>
            Dav off
        </IfModule>

        SetEnv HOME /var/www/nextcloud
        SetEnv HTTP_HOME /var/www/nextcloud
        </Directory>

    </VirtualHost>
</IfModule>