{% extends "vhost-http.twig" %}

{% block body %}
<IfModule mod_ssl.c>
{{ parent()|trim }}
</IfModule>
{% endblock %}

{% block extra %}
{{ parent() ? (parent() ~ "\n") : '' }}
	SSLEngine on

	SSLCertificateFile {{ WEB_HTTPS_DEFAULT_CERT_PEM }}
	SSLCertificateKeyFile {{ WEB_HTTPS_DEFAULT_CERT_PRIVKEY }}
	SSLCACertificateFile {{ WEB_HTTPS_DEFAULT_CERT_CHAIN }}

	# SSLCertificateFile /etc/letsencrypt/live/{{ DOMAIN }}/cert.pem
	# SSLCertificateKeyFile /etc/letsencrypt/live/{{ DOMAIN }}/privkey.pem
	# SSLCACertificateFile /etc/letsencrypt/live/{{ DOMAIN }}/chain.pem

	BrowserMatch "MSIE [2-6]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
	BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
{% endblock extra %}

{% block force_https %}{% endblock %}