<VirtualHost *:80>
	ServerName gitea.example.com
	ServerAdmin webmaster@example.com
	DocumentRoot /var/www/html
	Alias "/.well-known/acme-challenge" "/var/www/lets_encrypt/challenges"
	RedirectMatch Permanent ^(?!/\.well-known/).* https://gitea.example.com
	CustomLog ${APACHE_LOG_DIR}/gitea_access.log combined
	ErrorLog ${APACHE_LOG_DIR}/gitea_error.log
	LogLevel warn
</VirtualHost>
<VirtualHost *:443>
	ServerName gitea.example.com
	ServerAdmin webmaster@example.com
	DocumentRoot /var/www/html

	ProxyPreserveHost On
	ProxyRequests off
	AllowEncodedSlashes NoDecode
	ProxyPass / http://localhost:3000/ nocanon

        CustomLog ${APACHE_LOG_DIR}/gitea_access.log combined
        ErrorLog ${APACHE_LOG_DIR}/gitea_error.log

        SSLEngine on
        SSLProtocol all -SSLv2 -SSLv3
        SSLHonorCipherOrder on
        SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"

        SSLCertificateFile /etc/ssl/certs/gitea.crt
        SSLCertificateKeyFile /etc/ssl/private/gitea.key

</VirtualHost>