ServerRoot /usr/lib/apache2
ServerName www.randomdan.homeip.net
ServerAdmin dan.goodliffe@randomdan.homeip.net
PidFile /var/run/apache2.pid

ErrorLog /var/log/apache2/error.log
LogFormat "%V %h %l %u %t \"%r\" %>s %b %Dus" common
LogFormat "%V %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" ncsa
CustomLog /var/log/apache2/access.log common
CustomLog /var/log/apache2/ncsa.log ncsa

LogLevel warn
User apache
Group web
Listen 80
Listen 443
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
ServerSignature On
Protocols h2 h2c http/1.1

LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authn_core_module modules/mod_authn_core.so
Include /etc/apache2/modules.d/75_mod_perl.conf
PerlSwitches -w -T -I/var/www/localhost/htdocs/bugzilla
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule mime_module modules/mod_mime.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cgid_module modules/mod_cgid.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule dir_module modules/mod_dir.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule env_module modules/mod_env.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule unixd_module modules/mod_unixd.so
LoadModule fcgid_module modules/mod_fcgid.so
LoadModule filter_module modules/mod_filter.so
LoadModule php7_module /usr/lib/php7.1/apache2/libphp7.so
LoadModule alias_module modules/mod_alias.so
LoadModule cache_module modules/mod_cache.so
LoadModule cache_disk_module modules/mod_cache_disk.so
LoadModule status_module modules/mod_status.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
LoadModule http2_module modules/mod_http2.so
LoadModule headers_module modules/mod_headers.so
LoadModule expires_module modules/mod_expires.so

CacheRoot   "/var/cache/apache2/"
CacheEnable disk /
CacheDirLevels 2
CacheDirLength 1
CacheMinExpire 60
ExpiresActive on
ExpiresByType image/png A86400
ExpiresByType text/css A86400
ExpiresByType application/x-javascript A86400

<Directory />
	Options FollowSymLinks Indexes ExecCGI
	AllowOverride All
</Directory>

<Location /server-status>
	SetHandler server-status
</Location>
ExtendedStatus On

DirectoryIndex index.php index.html
VirtualDocumentRoot /var/www/shared/vhosts/%0/
AccessFileName .htaccess
UseCanonicalName Off
HostnameLookups Off
FcgidMaxRequestsPerProcess 100
FcgidMinProcessesPerClass 1
StartServers 1
MaxSpareThreads 5
MaxRequestWorkers 9
ThreadsPerChild 3
SSLSessionCache shmcb:/run/apache2/

AddType application/x-httpd-php .php
AddType text/xsl .xsl

# Compress output
FilterDeclare COMPRESS CONTENT_SET
FilterProvider COMPRESS DEFLATE %{CONTENT_TYPE}=~/^text/
FilterProvider COMPRESS DEFLATE %{CONTENT_TYPE}='application/x-javascript'
FilterProvider COMPRESS DEFLATE %{CONTENT_TYPE}='application/xml'
FilterProtocol COMPRESS DEFLATE change=yes;byteranges=no
FilterChain COMPRESS

# Minify CSS and JS
PerlModule Apache2::Filter::Minifier::CSS
PerlSetVar CssMinifier CSS::Minifier::XS
PerlModule Apache2::Filter::Minifier::JavaScript
PerlSetVar JavaScriptMinifier JavaScript::Minifier::XS
<LocationMatch "\.css$">
	PerlOutputFilterHandler   Apache2::Filter::Minifier::CSS
</LocationMatch>
<LocationMatch "\.js$">
	PerlOutputFilterHandler   Apache2::Filter::Minifier::JavaScript
</LocationMatch>
<LocationMatch "^/js/">
	PerlOutputFilterHandler   Apache2::Filter::Minifier::JavaScript
</LocationMatch>

<AuthnProviderAlias ldap ldapauth>
	AuthLDAPURL "ldap://localhost:389/ou=Users,dc=random,dc=lan?uid?sub?(objectClass=*)"
</AuthnProviderAlias>

# Host specific stuff
<VirtualHost *>
	# Needed to stop whatever is first from being the default
</VirtualHost>
<VirtualHost *>
	ServerName bugzilla.randomdan.homeip.net
	<FilesMatch \.cgi$>
		SetHandler perl-script
		PerlHandler ModPerl::Registry
		Options ExecCGI
	</FilesMatch>
	PerlModule ModPerl::Registry
	PerlModule CGI
	PerlSendHeader On
</VirtualHost>
<VirtualHost *:443>
	ServerName gentoobrowse.randomdan.homeip.net
	SSLEngine On
	SSLCertificateFile /etc/letsencrypt/live/gentoobrowse.randomdan.homeip.net/cert.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/gentoobrowse.randomdan.homeip.net/privkey.pem
	SSLCertificateChainFile /etc/letsencrypt/live/gentoobrowse.randomdan.homeip.net/chain.pem
	Header always set Strict-Transport-Security "max-age=864000; includeSubDomains"
</VirtualHost>
<VirtualHost *:443>
	ServerName git.randomdan.homeip.net
	SSLEngine On
	SSLCertificateFile /etc/letsencrypt/live/git.randomdan.homeip.net/cert.pem
	SSLCertificateKeyFile /etc/letsencrypt/live/git.randomdan.homeip.net/privkey.pem
	SSLCertificateChainFile /etc/letsencrypt/live/git.randomdan.homeip.net/chain.pem
	Header always set Strict-Transport-Security "max-age=864000; includeSubDomains"
</VirtualHost>