#Check, which sites are running under https: ls /etc/apache2/sites-enabled
#Disable all SSL-confs (recommended). Example: a2dissite 000-default.conf
 
#Check again if folder is empty. Otherwise delete the content: rm /etc/apache2/sites-enabled/*
 
#Now we create all vhost-files that we need. In this case:
 
cd /etc/apache2/sites-available
 
#For the whole site: touch 000-bbs-ilias.conf
#If you don`t use similar vhost files allready, you can choose my examples. Just edit some lines so it will fit to your installation:
 
nano 000-bbs-ilias.conf
#Copy the code below and change the lines accordingly to your needs:

<VirtualHost bbs-ilias.de:80>
    ServerAdmin admin@bbs-ilias.de
 
    # Server Name und Alias
    ServerName bbs-ilias.de
    ServerAlias www.bbs-ilias.de
 
    # Fehler- und Zugriffsprotokolle
    ErrorLog /var/log/apache2/error.log
    LogLevel warn
    CustomLog /var/log/apache2/access.log combined
 
    # Dokumenten-Wurzelverzeichnis
    DocumentRoot /var/www/html
 
    # Immer auf HTTPS umleiten
    RewriteEngine on
    RewriteCond %{SERVER_NAME} =bbs-ilias.de [OR]
    RewriteCond %{SERVER_NAME} =www.bbs-ilias.de
    RewriteRule ^ https://bbs-ilias.de%{REQUEST_URI} [END,NE,R=permanent]
 
    # HTTP/2-Unterstützung
    Protocols h2 http/1.1
 
    # KeepAlive für bessere Performance
    KeepAlive on
    MaxKeepAliveRequests 100
    KeepAliveTimeout 5
 
    # XSendFile-Konfiguration
    XSendFilePath /var/www/html
    XSendFilePath /opt
 
    # Gzip-Kompression aktivieren
    <IfModule mod_deflate.c>
        AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css application/javascript
        AddOutputFilterByType DEFLATE image/svg+xml
        DeflateCompressionLevel 6
    </IfModule>
 
    # Verzeichniskonfiguration
    <Directory /var/www/html/>
        Options -Indexes +FollowSymlinks
        DirectoryIndex index.php index.html index.htm
        AllowOverride All
        Require all granted
 
        # Deaktivierung von HTTP-Methoden, die nicht benötigt werden
        <LimitExcept GET POST>
            deny from all
        </LimitExcept>
    </Directory>
 
    # Cache-Control für statische Ressourcen
    <IfModule mod_expires.c>
        ExpiresActive On
        ExpiresByType text/css "access plus 7 days"
        ExpiresByType image/gif "access plus 7 days"
        ExpiresByType image/jpg "access plus 7 days"
        ExpiresByType image/jpeg "access plus 7 days"
        ExpiresByType image/png "access plus 7 days"
        ExpiresByType application/javascript "access plus 7 days"
    </IfModule>
</VirtualHost>

a2ensite 000-bbs-ilias.conf
systemctl restart apache2

apt install certbot python3-certbot-apache
certbot