<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName inat.netviper.com
    DocumentRoot /var/www/inat.netviper.com/public

    <Directory /var/www/inat.netviper.com/public>
        AllowOverride All
        Require all granted
        Options -Indexes
    </Directory>

    <FilesMatch \.php$>
        SetHandler "proxy:unix:/run/php/php8.3-inat.netviper.com.sock|fcgi://localhost"
    </FilesMatch>

    ErrorLog /var/www/inat.netviper.com/logs/error.log
    CustomLog /var/www/inat.netviper.com/logs/access.log combined

    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options DENY
    Header always set X-XSS-Protection "1; mode=block"
    Header always set Referrer-Policy strict-origin-when-cross-origin
    Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()"

    SSLCertificateFile /etc/letsencrypt/live/devlib.netviper.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/devlib.netviper.com/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>
