# vim: ft=apache
<VirtualHost *:443>
    ServerAdmin webmaster@interzero-meldeportal.dev.local
    DocumentRoot "/usr/local/apache2/htdocs/"
    ServerName interzero-meldeportal.dev.local

    LogLevel debug
    ErrorLog "logs/interzero-meldeportal.dev.local-error_log"
    CustomLog "logs/interzero-meldeportal.dev.local-access_log" common

    DirectoryIndex index.php

    AllowEncodedSlashes Off

    SSLEngine on
	SSLCertificateFile "/usr/local/apache2/conf/server.crt"
	SSLCertificateKeyFile "/usr/local/apache2/conf/server.key"

    <Directory "/usr/local/apache2/htdocs/">
        Options -Indexes +FollowSymLinks

        Order allow,deny
        Allow from all

        AllowOverride All
    </Directory>

    # export SSL/TLS related `SSL_*' environment variables for CGI/PHP
    <FilesMatch "\.(cgi|shtml|phtml|php)$">
        SSLOptions +StdEnvVars
    </FilesMatch>

    BrowserMatch "MSIE [2-6]" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
    # MSIE 7 and newer should be able to use keepalive
    BrowserMatch "MSIE [7-9]" ssl-unclean-shutdown

    # Set-Cookie SameSite
    Header always edit Set-Cookie (.*) "$1;HttpOnly;Secure;SameSite=None"

    ProxyTimeout 600

    <FilesMatch "\.php$">
        SetHandler "proxy:fcgi://app:9000"
		CGIPassAuth On
    </FilesMatch>

</VirtualHost>