# Private HTTPS
# Enable mod_ssl, mod_authz_core, mod_authz_host, and mod_dir first.
# Configure Listen 443 once in the main server configuration.
<VirtualHost *:443>
    ServerName service.home.arpa
    DocumentRoot /var/www/myownca-example
    DirectoryIndex index.html

    SSLEngine on
    SSLCertificateFile /etc/myownca-example/tls/service-fullchain.pem
    SSLCertificateKeyFile /etc/myownca-example/tls/service.key
    SSLProtocol -all +TLSv1.2 +TLSv1.3

    <Directory /var/www/myownca-example>
        Options -Indexes
        AllowOverride None
        Require all granted
    </Directory>
</VirtualHost>