# # @file vhosts_ssl.conf # # DBS vhosts dbs9 # ############################################################################### # dbs9.dx30.net 2016-07-30 # here just for tracking / uptime status ServerName dbs9.dx30.net ServerAdmin webmaster@dbswebsite.com DocumentRoot /etc/apache2/default-site/ HostNameLookups off LogLevel warn RewriteEngine on # # # ServerName dbs9.dx30.net # RewriteEngine On # # # use all three # # SSLEngine On # # SSLCertificateFile /etc/letsencrypt/live/www.oksanamastersusa.com/fullchain.pem # # SSLCertificateChainFile /etc/letsencrypt/live/www.oksanamastersusa.com/chain.pem # # SSLCertificateKeyFile /etc/letsencrypt/live/www.oksanamastersusa.com/privkey.pem # SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 # SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 # SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS # SSLProtocol all -SSLv2 -SSLv3 # SSLHonorCipherOrder on # # ServerAdmin webmaster@oksanamastersusa.com # DocumentRoot /etc/apache2/default-site/ # HostNameLookups off # LogLevel warn # # oksanamastersusa.com 2016-07-30 ServerName www.oksanamastersusa.com ServerAdmin webmaster@dbswebsite.com ServerAlias www.oksanamastersusa.com oksanamastersusa.com DocumentRoot /home/clients/oksanamastersusa.com/htdocs TransferLog /home/clients/oksanamastersusa.com/logs/access_log CustomLog /home/clients/oksanamastersusa.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/oksanamastersusa.com/logs/error_log LogLevel warn RewriteEngine on # RewriteCond %{HTTP_HOST} !^www.(.+)$ # RewriteCond %{REQUEST_URI} !^/robots.txt$ # change for SSL: # RewriteRule ^(.+) http://www.%{HTTP_HOST}$1 [R=301,L] ErrorDocument 404 http://www.oksanamastersusa.com/ ServerName www.oksanamastersusa.com ServerAlias www.oksanamastersusa.com oksanamastersusa.com RewriteEngine On # use all three SSLEngine On SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on ServerAdmin webmaster@oksanamastersusa.com DocumentRoot /home/clients/oksanamastersusa.com/htdocs/ TransferLog /home/clients/oksanamastersusa.com/logs/access_log CustomLog /home/clients/oksanamastersusa.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/oksanamastersusa.com/logs/error_log LogLevel warn ErrorDocument 404 https://www.oksanamastersusa.com/ # thecenteronline.org 2016-08-01 ServerName www.thecenteronline.org ServerAdmin webmaster@dbswebsite.com ServerAlias www.thecenteronline.org thecenteronline.org DocumentRoot /home/clients/thecenteronline.org/htdocs TransferLog /home/clients/thecenteronline.org/logs/access_log CustomLog /home/clients/thecenteronline.org/logs/access_log combined HostNameLookups off ErrorLog /home/clients/thecenteronline.org/logs/error_log LogLevel warn RewriteEngine on ErrorDocument 404 http://www.thecenteronline.org/ ServerName www.thecenteronline.org ServerAlias www.thecenteronline.org thecenteronline.org RewriteEngine On SSLEngine On # use all three SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on ServerAdmin webmaster@thecenteronline.org DocumentRoot /home/clients/thecenteronline.org/htdocs/ TransferLog /home/clients/thecenteronline.org/logs/access_log CustomLog /home/clients/thecenteronline.org/logs/access_log combined HostNameLookups off ErrorLog /home/clients/thecenteronline.org/logs/error_log LogLevel warn ErrorDocument 404 https://www.thecenteronline.org/ # harshawtrane.com 2016-08-26 ServerName www.harshawtrane.com ServerAdmin webmaster@dbswebsite.com ServerAlias www.harshawtrane.com harshawtrane.com DocumentRoot /home/clients/harshawtrane.com/htdocs TransferLog /home/clients/harshawtrane.com/logs/access_log CustomLog /home/clients/harshawtrane.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/harshawtrane.com/logs/error_log LogLevel warn RewriteEngine on ErrorDocument 404 http://www.harshawtrane.com/ ServerName www.harshawtrane.com ServerAlias www.harshawtrane.com harshawtrane.com RewriteEngine On # use all three ###### SSLEngine On # Probably need to rename these for correct paths: SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on ServerAdmin webmaster@harshawtrane.com DocumentRoot /home/clients/harshawtrane.com/htdocs/ TransferLog /home/clients/harshawtrane.com/logs/access_log CustomLog /home/clients/harshawtrane.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/harshawtrane.com/logs/error_log LogLevel warn ErrorDocument 404 https://www.harshawtrane.com/ # fischersips.com 2016-11-15 ServerName www.fischersips.com ServerAdmin webmaster@dbswebsite.com ServerAlias www.fischersips.com fischersips.com DocumentRoot /home/clients/fischersips.com/htdocs TransferLog /home/clients/fischersips.com/logs/access_log CustomLog /home/clients/fischersips.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/fischersips.com/logs/error_log LogLevel warn RewriteEngine on ErrorDocument 404 http://www.fischersips.com/ # NOTE: DO NOT UNCOMMENT this section until the cert is installed and ready to # go! # # # ServerName www.fischersips.com # ServerAlias www.fischersips.com fischersips.com # RewriteEngine On # # # use all three ###### # SSLEngine On # # Probably need to rename these for correct paths: # SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem # SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem # SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem # SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 # SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 # SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS # SSLProtocol all -SSLv2 -SSLv3 # SSLHonorCipherOrder on # # ServerAdmin webmaster@fischersips.com # DocumentRoot /home/clients/fischersips.com/htdocs/ # TransferLog /home/clients/fischersips.com/logs/access_log # CustomLog /home/clients/fischersips.com/logs/access_log combined # HostNameLookups off # ErrorLog /home/clients/fischersips.com/logs/error_log # LogLevel warn # ErrorDocument 404 https://www.fischersips.com/ # # stseducation-us.com 2016-11-18 ServerName www.stseducation-us.com ServerAdmin webmaster@dbswebsite.com ServerAlias www.stseducation-us.com stseducation-us.com ServerAlias www.schooltechsupply.com schooltechsupply.com DocumentRoot /home/clients/stseducation-us.com/htdocs TransferLog /home/clients/stseducation-us.com/logs/access_log CustomLog /home/clients/stseducation-us.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/stseducation-us.com/logs/error_log LogLevel warn RewriteEngine on ErrorDocument 404 http://www.stseducation-us.com/ ServerName www.stseducation-us.com ServerAlias www.stseducation-us.com stseducation-us.com ServerAlias www.schooltechsupply.com schooltechsupply.com RewriteEngine On # use all three ###### SSLEngine On SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on ServerAdmin webmaster@stseducation-us.com DocumentRoot /home/clients/stseducation-us.com/htdocs/ TransferLog /home/clients/stseducation-us.com/logs/access_log CustomLog /home/clients/stseducation-us.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/stseducation-us.com/logs/error_log LogLevel warn ErrorDocument 404 https://www.stseducation-us.com/ # reach.rescare.com 2016-12-15 ServerName reach.rescare.com ServerAdmin webmaster@dbswebsite.com DocumentRoot /home/clients/reach.rescare.com/htdocs TransferLog /home/clients/reach.rescare.com/logs/access_log CustomLog /home/clients/reach.rescare.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/reach.rescare.com/logs/error_log LogLevel warn RewriteEngine on ErrorDocument 404 http://reach.rescare.com/ ServerName reach.rescare.com RewriteEngine On # use all three ###### SSLEngine On # Probably need to rename these for correct paths: SSLCertificateFile /etc/apache2/conf/ssl/reach.rescare.com/ssl_certificate.crt SSLCertificateChainFile /etc/apache2/conf/ssl/reach.rescare.com/IntermediateCA.crt SSLCertificateKeyFile /etc/apache2/conf/ssl/reach.rescare.com/server.key SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on ServerAdmin webmaster@reach.rescare.com DocumentRoot /home/clients/reach.rescare.com/htdocs/ TransferLog /home/clients/reach.rescare.com/logs/access_log CustomLog /home/clients/reach.rescare.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/reach.rescare.com/logs/error_log LogLevel warn ErrorDocument 404 https://reach.rescare.com/ # wiki.dbswebsite.com 2017-01-19 ServerName www.wiki.dbswebsite.com ServerAdmin webmaster@dbswebsite.com ServerAlias www.wiki.dbswebsite.com wiki.dbswebsite.com ServerAlias www.wiki.resultsbydesign.com wiki.resultsbydesign.com DocumentRoot /home/clients/wiki.dbswebsite.com/htdocs TransferLog /home/clients/wiki.dbswebsite.com/logs/access_log CustomLog /home/clients/wiki.dbswebsite.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/wiki.dbswebsite.com/logs/error_log LogLevel warn RewriteEngine on ErrorDocument 404 http://www.wiki.dbswebsite.com/ # NOTE: DO NOT UNCOMMENT this section until the cert is installed and ready to # go! # # # ServerName www.wiki.dbswebsite.com # ServerAlias www.wiki.dbswebsite.com wiki.dbswebsite.com # RewriteEngine On # # # use all three ###### # SSLEngine On # # Probably need to rename these for correct paths: # SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem # SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem # SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem # SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 # SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 # SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS # SSLProtocol all -SSLv2 -SSLv3 # SSLHonorCipherOrder on # # ServerAdmin webmaster@wiki.dbswebsite.com # DocumentRoot /home/clients/wiki.dbswebsite.com/htdocs/ # TransferLog /home/clients/wiki.dbswebsite.com/logs/access_log # CustomLog /home/clients/wiki.dbswebsite.com/logs/access_log combined # HostNameLookups off # ErrorLog /home/clients/wiki.dbswebsite.com/logs/error_log # LogLevel warn # ErrorDocument 404 https://www.wiki.dbswebsite.com/ # # healthbyradiant.com 2017-01-20 ServerName www.healthbyradiant.com ServerAdmin webmaster@dbswebsite.com ServerAlias www.healthbyradiant.com healthbyradiant.com DocumentRoot /home/clients/healthbyradiant.com/htdocs TransferLog /home/clients/healthbyradiant.com/logs/access_log CustomLog /home/clients/healthbyradiant.com/logs/access_log combined HostNameLookups off ErrorLog /home/clients/healthbyradiant.com/logs/error_log LogLevel warn RewriteEngine on # RewriteCond %{HTTP_HOST} !^www.(.+)$ # RewriteCond %{REQUEST_URI} !^/robots.txt$ # change for SSL: # RewriteRule ^(.+) http://www.%{HTTP_HOST}$1 [R=301,L] ErrorDocument 404 http://www.healthbyradiant.com/ # NOTE: DO NOT UNCOMMENT this section until the cert is installed and ready to # go! # # # ServerName www.healthbyradiant.com # ServerAlias www.healthbyradiant.com healthbyradiant.com # RewriteEngine On # # # use all three ###### # SSLEngine On # # Probably need to rename these for correct paths: # SSLCertificateFile /etc/letsencrypt/live/dbs9.dx30.net/fullchain.pem # SSLCertificateChainFile /etc/letsencrypt/live/dbs9.dx30.net/chain.pem # SSLCertificateKeyFile /etc/letsencrypt/live/dbs9.dx30.net/privkey.pem # SetEnvIf User-Agent ".*MSIE [1-5].*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 # SetEnvIf User-Agent ".*MSIE [6-9].*" ssl-unclean-shutdown # # https://mozilla.github.io/server-side-tls/ssl-config-generator/ 2016-06-22 # SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS # SSLProtocol all -SSLv2 -SSLv3 # SSLHonorCipherOrder on # # ServerAdmin webmaster@healthbyradiant.com # DocumentRoot /home/clients/healthbyradiant.com/htdocs/ # TransferLog /home/clients/healthbyradiant.com/logs/access_log # CustomLog /home/clients/healthbyradiant.com/logs/access_log combined # HostNameLookups off # ErrorLog /home/clients/healthbyradiant.com/logs/error_log # LogLevel warn # ErrorDocument 404 https://www.healthbyradiant.com/ #