# vim: set ft=apache sw=4 ts=4 sts=4 et :
<VirtualHost *:80>
    ServerName hatchlearningcenter.org
    ServerAlias \
        www.hatchlearningcenter.org \
        hatchlearningcenter.com \
        www.hatchlearningcenter.com \
        hlcks.org \
        www.hlcks.org \
        hlcks.com \
        www.hlcks.com \
        hlckc.org \
        www.hlckc.org \
        hlckc.com \
        www.hlckc.com

    RewriteEngine on
    RewriteRule /.* https://%{SERVER_NAME}$0 [R=301,L]
</VirtualHost>

<VirtualHost _default_:443>
    ServerName hatchlearningcenter.org
    ServerAlias \
        hatchlearningcenter.com \
        www.hatchlearningcenter.com \
        hlcks.org \
        www.hlcks.org \
        hlcks.com \
        www.hlcks.com \
        hlckc.org \
        www.hlckc.org \
        hlckc.com \
        www.hlckc.com

    Include conf.d/ssl.include

    SSLCertificateFile /etc/pki/tls/certs/hatchlearningcenter.org.cer
    SSLCertificateKeyFile /etc/pki/tls/private/hatchlearningcenter.org.key
    SSLCertificateChainFile /etc/pki/tls/certs/hatchlearningcenter.org.cer

    Header always set \
        Strict-Transport-Security "max-age=63072000; includeSubDomains"

    RewriteEngine On
    RewriteRule /.* https://www.hatchlearningcenter.org$0 [R=301,L]
</VirtualHost>

<VirtualHost _default_:443>
    ServerName www.hatchlearningcenter.org

    Include conf.d/ssl.include

    SSLCertificateFile /etc/pki/tls/certs/hatchlearningcenter.org.cer
    SSLCertificateKeyFile /etc/pki/tls/private/hatchlearningcenter.org.key
    SSLCertificateChainFile /etc/pki/tls/certs/hatchlearningcenter.org.cer

    Header always set \
        Strict-Transport-Security "max-age=63072000; includeSubDomains"

    SSLProxyEngine On
    RewriteEngine On

    DocumentRoot /srv/www/hatchlearningcenter.org/htdocs
    <Directory /srv/www/hatchlearningcenter.org/htdocs>
        Require all granted
    </Directory>
</VirtualHost>