ServerName ${domain}
ServerRoot /usr/local

Listen [${subnet}${db_addr}]:80
Listen [${subnet}${db_addr}]:443
Listen ${db_ipv4_int_addr}:443

LoadModule mpm_prefork_module libexec/apache24/mod_mpm_prefork.so
LoadModule authn_file_module libexec/apache24/mod_authn_file.so
LoadModule authn_core_module libexec/apache24/mod_authn_core.so
LoadModule authz_host_module libexec/apache24/mod_authz_host.so
LoadModule authz_groupfile_module libexec/apache24/mod_authz_groupfile.so
LoadModule authz_user_module libexec/apache24/mod_authz_user.so
LoadModule authz_core_module libexec/apache24/mod_authz_core.so
LoadModule access_compat_module libexec/apache24/mod_access_compat.so
LoadModule auth_basic_module libexec/apache24/mod_auth_basic.so
LoadModule auth_digest_module libexec/apache24/mod_auth_digest.so
LoadModule reqtimeout_module libexec/apache24/mod_reqtimeout.so
LoadModule filter_module libexec/apache24/mod_filter.so
LoadModule mime_module libexec/apache24/mod_mime.so
LoadModule log_config_module libexec/apache24/mod_log_config.so
LoadModule env_module libexec/apache24/mod_env.so
LoadModule headers_module libexec/apache24/mod_headers.so
LoadModule setenvif_module libexec/apache24/mod_setenvif.so
LoadModule version_module libexec/apache24/mod_version.so
LoadModule ssl_module libexec/apache24/mod_ssl.so
LoadModule unixd_module libexec/apache24/mod_unixd.so
LoadModule status_module libexec/apache24/mod_status.so
LoadModule autoindex_module libexec/apache24/mod_autoindex.so
LoadModule watchdog_module libexec/apache24/mod_watchdog.so
LoadModule md_module libexec/apache24/mod_md.so

<IfModule !mpm_prefork_module>
	#LoadModule cgid_module libexec/apache24/mod_cgid.so
</IfModule>
<IfModule mpm_prefork_module>
	#LoadModule cgi_module libexec/apache24/mod_cgi.so
</IfModule>
LoadModule dir_module libexec/apache24/mod_dir.so
LoadModule alias_module libexec/apache24/mod_alias.so

IncludeOptional etc/apache24/modules.d/[0-9][0-9][0-9]_*.conf
 
<IfModule unixd_module>
User www
Group www
</IfModule>

<Directory />
    AllowOverride none
    Require all denied
</Directory>

MDCertificateAgreement accepted
MDContactEmail admin@${domain}
MDomain ${domain} www.${domain}

# <VirtualHost [${subnet}${feed_addr}]:443>
#     ServerName "plex.${domain}"
#     SSLEngine on
#     ProxyPass "/" "http://localhost:32400"
#     ProxyPassReverse "/" "http://localhost:32400"
# </VirtualHost>

<VirtualHost [${subnet}${db_addr}]:443 ${db_ipv4_int_addr}:443>
    ServerName "www.${domain}"
    ServerName "${domain}"

    <Location "/md-status">
        SetHandler md-status
    </Location>

    DocumentRoot "/data"
    <Directory "/data">
        Options Indexes
        AllowOverride Options Indexes FileInfo AuthConfig
        AuthType Basic
        AuthName "Who be you?"
        AuthUserFile /usr/local/etc/apache24/.badpass
        Require valid-user
    </Directory>

    <DirectoryMatch "^.*/\..*">
        Require all denied
    </DirectoryMatch>

    <Files ".*">
        Require all denied
    </Files>

    <IfModule dir_module>
        DirectoryIndex index.html
    </IfModule>

    SSLEngine		on
    # SSLCertificateFile	    /usr/local/etc/apache24/fullchain.pem
    # SSLCertificateKeyFile	/usr/local/etc/apache24/privkey.pem

    ErrorLog "/var/log/httpd-error.log"
    LogLevel warn

    <IfModule log_config_module>
        LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
        LogFormat "%h %l %u %t \"%r\" %>s %b" common

        <IfModule logio_module>
        # You need to enable mod_logio.c to use %I and %O
        LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
        </IfModule>

        CustomLog "/var/log/httpd-access.log" common
    </IfModule>

    <IfModule alias_module>
        ScriptAlias /cgi-bin/ "/data/metadata/www/cgi-bin/"
    </IfModule>

    <Directory "/data/metadata/www/cgi-bin">
        AllowOverride None
        Options None
        Require all granted
    </Directory>

    <IfModule headers_module>
        RequestHeader unset Proxy early
    </IfModule>

    <IfModule mime_module>
        TypesConfig etc/apache24/mime.types
        AddType application/x-compress .Z
        AddType application/x-gzip .gz .tgz
    </IfModule>

</VirtualHost>

<IfModule ssl_module>
    SSLRandomSeed startup builtin
    SSLRandomSeed connect builtin
</IfModule>

Include etc/apache24/Includes/*.conf