#
# https://gitpull.it/T779
#
<VirtualHost *:80>

	ServerName fonts.ferdi.cc

	# https://gitpull.it/T776
	Include /etc/apache2/my-includes/google-font-proxy.conf

</VirtualHost>

<VirtualHost *:80>

	ServerName fonts.ferdi.cc

	SSLEngine on
	SSLCertificateFile      /etc/letsencrypt/live/fonts.ferdi.cc/cert.pem
	SSLCertificateKeyFile   /etc/letsencrypt/live/fonts.ferdi.cc/privkey.pem
	SSLCertificateChainFile /etc/letsencrypt/live/fonts.ferdi.cc/chain.pem

	Include /etc/apache2/my-includes/ssl-hardening.conf
</VirtualHost>

$ certbot certonly --webroot --webroot-path=/var/www/html -d fonts.ferdi.cc
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for fonts.ferdi.cc
Using the webroot path /var/www/html for all unmatched domains.
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/fonts.ferdi.cc/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/fonts.ferdi.cc/privkey.pem
   Your cert will expire on 2021-06-30. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le