<VirtualHost *:443>
        ServerName cat-net.ru
        ServerAlias www.cat-net.ru
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/cat-net.ru

	ErrorLog ${APACHE_LOG_DIR}/error.log
	CustomLog ${APACHE_LOG_DIR}/access.log combined

	#   Enable/Disable SSL for this virtual host.
	SSLEngine on

	# certificate files
	#SSLCertificateFile /etc/letsencrypt/live/cat-net.ru/cert.pem
	#SSLCertificateChainFile /etc/letsencrypt/live/cat-net.ru/fullchain.pem
	#SSLCertificateKeyFile /etc/letsencrypt/live/cat-net.ru/privkey.pem
	#SSLCACertificateFile /etc/letsencrypt/live/cat-net.ru/chain.pem

        SSLCertificateFile /etc/letsencrypt/live/cat-net.ru/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/cat-net.ru/privkey.pem

	# disable old protocol
	#SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

	# method crypt 
	# SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384

	# misc options
	#SSLHonorCipherOrder off
	#SSLSessionTickets off

	# enable HTTP/2, if available
	#Protocols h2 http/1.1

	# HTTP Strict Transport Security (mod_headers is required) (63072000 seconds)
	#Header always set Strict-Transport-Security "max-age=63072000"

	#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
	<FilesMatch "\.(?:cgi|shtml|phtml|php)$">
		SSLOptions +StdEnvVars
	</FilesMatch>
	<Directory /usr/lib/cgi-bin>
		SSLOptions +StdEnvVars
	</Directory>
</VirtualHost>
