<VirtualHost *:80>

    ServerName avsa.noappname.net
    DocumentRoot /var/www/html/avsa
    DirectoryIndex index.php index.html

    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule (.*) https://%{SERVER_NAME}/$1 [R,L]

    ErrorLog /var/logs/avsa.www.error.log
    CustomLog /var/logs/avsa.www.access.log combined
    <Directory /var/www/html/avsa>
        Require all granted
        AllowOverride All
    </Directory>

</VirtualHost>

<VirtualHost *:443>

<FilesMatch \.php$>
    SetHandler application/x-httpd-php
</FilesMatch>

AddType text/html .php
DirectoryIndex index.php
php_value session.save_handler "files"
php_value session.save_path    "/var/lib/php/session"

    ServerName avsa.noappname.net
    DocumentRoot /var/www/html/avsa
    DirectoryIndex index.php index.html

    ErrorLog /var/logs/avsa.www.error.log
    CustomLog /var/logs/avsa.www.access.log combined
    <Directory /var/www/html/avsa>
        Require all granted
        AllowOverride All
    </Directory>

    SSLEngine on

    SSLCertificateFile /etc/letsencrypt/live/avsa.noappname.net/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/avsa.noappname.net/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/avsa.noappname.net/chain.pem

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
            SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory /usr/lib/cgi-bin>
            SSLOptions +StdEnvVars
    </Directory>
    BrowserMatch "MSIE [2-6]" \
            nokeepalive ssl-unclean-shutdown \
            downgrade-1.0 force-response-1.0
    # MSIE 7 and newer should be able to use keepalive
    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

</VirtualHost>