sovereign/roles/owncloud/templates/etc_apache2_sites-available...

<VirtualHost *:80>
    ServerName {{ owncloud_domain }}

    Redirect permanent / https://{{ owncloud_domain }}/
</VirtualHost>

<VirtualHost *:443>
    ServerName {{ owncloud_domain }}

    SSLEngine on
    SSLProtocol ALL -SSLv2 -SSLv3
    SSLHonorCipherOrder On
    SSLCompression off
    SSLUseStapling On
    SSLStaplingResponderTimeout 5
    SSLStaplingReturnResponderErrors off
    SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
    SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt
    SSLCertificateKeyFile   /etc/ssl/private/wildcard_private.key
    SSLCACertificateFile    /etc/ssl/certs/wildcard_ca.pem
    Header add Strict-Transport-Security "max-age=15768000; includeSubdomains"

    DocumentRoot            /var/www/owncloud
    Options                 -Indexes

    ErrorLog                /var/log/apache2/owncloud.info-error_log
    CustomLog               /var/log/apache2/owncloud.info-access_log common

    php_value session_cache_limiter "public"

    <Directory /var/www/owncloud>
        AllowOverride All
        Order allow,deny
        allow from all
        DirectoryIndex index.php

        SetOutputFilter DEFLATE

        ExpiresActive On
        ExpiresDefault "access plus 2 weeks"
        ExpiresByType text/css "access plus 2 weeks"
        ExpiresByType image/svg+xml "access plus 2 weeks"
        ExpiresByType image/png "access plus 2 weeks"
        ExpiresByType text/javascript "access plus 2 weeks"
        ExpiresByType application/x-javascript "access plus 2 weeks"
        ExpiresByType application/javascript "access plus 2 weeks"
        ExpiresByType application/x-icon "access plus 2 weeks"

        Header set Cache-Control "public"
    </Directory>
</VirtualHost>