apache_configuration_example.conf

<IfModule mod_ssl.c>
<VirtualHost *:443>

    ServerName bmrbdep.bmrb.wisc.edu
    ServerAlias	bmrbdep

    DirectoryIndex index.shtml index.html index.htm index.php

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    CustomLog "| /usr/sbin/rotatelogs /websites/bmrbdep/logs/access_log.%Y.%W 604800" combined
    ErrorLog "| /usr/sbin/rotatelogs /websites/bmrbdep/logs/error_log.%Y.%W 604800"

    <Proxy *>
        Require all granted
    </Proxy>

    # This is for the "back end" that powers the depositions
    ProxyPass         /deposition uwsgi://127.0.0.1:9000/ connectiontimeout=3600 timeout=3600
    ProxyPassReverse  /deposition uwsgi://127.0.0.1:9000/

    # This is for the "front end" - serves the Angular content
    DocumentRoot "/websites/bmrbdep/html"
    <Directory "/websites/bmrbdep/html">
        AllowOverride All
        Require all granted
    </Directory>

    #   Enable/Disable SSL for this virtual host.
    SSLEngine on

    #   SSL Protocol support:
    # List the enable protocol levels with which clients will be able to
    # connect.  Disable SSLv2+v3 access by default:
    SSLProtocol all -SSLv2 -SSLv3

    #   SSL Cipher Suite:
    #   List the ciphers that the client is permitted to negotiate.
    #   See the mod_ssl documentation for a complete list.
    SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
    SSLHonorCipherOrder on

    SSLCertificateFile /etc/letsencrypt/live/bmrbdep.bmrb.wisc.edu/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/bmrbdep.bmrb.wisc.edu/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/bmrbdep.bmrb.wisc.edu/chain.pem
</VirtualHost>
</IfModule>

<VirtualHost *:80>
    ServerName  bmrbdep.bmrb.wisc.edu
    ServerAlias bmrbdep
    ServerAdmin web@bmrb.wisc.edu

    Redirect / https://bmrbdep.bmrb.wisc.edu/
</VirtualHost>