IncludeOptional mods-enabled/*.load
IncludeOptional mods-enabled/*.conf

ServerName app.boxi.ch
ServerAdmin online@boxi.ch 
ServerTokens Prod
ServerSignature Off

DocumentRoot  "/var/www"

IncludeOptional                         /etc/apache2/conf.d/*.conf

AddDefaultCharset UTF-8
EnableSendfile on

FileETag None
TraceEnable off
Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
Header always append X-Frame-Options SAMEORIGIN
Header set X-XSS-Protection "1; mode=block"
RewriteEngine On
RewriteCond %{THE_REQUEST} !HTTP/1.1$
RewriteRule .* - [F]
Timeout 60

Mutex posixsem

OIDCCacheType file    
OIDCCacheDir ${APACHE_RUN_DIR}/mod_auth_openidc/cache

<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>
<Files ".ht*">
    Require all denied
</Files>

<IfModule log_config_module>
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>
</IfModule>

ErrorLog /dev/stderr
CustomLog /dev/stdout combined
LogLevel debug

IncludeOptional sites-enabled/*