apache2.conf

<VirtualHost *:443>
    DocumentRoot /var/www/html/public
    <Directory "/var/www/html/public">
        Require all granted
        Options -MultiViews
        RewriteEngine On
        RewriteBase /
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteRule ^(.*)$ index.php [QSA,L]
    </Directory>
    <Location />
        Require all granted
    </Location>
    Header always set X-Content-Type-Options "nosniff"

    SetEnv HTTPS on

    RewriteEngine On
    # We support only GET/POST
    RewriteCond %{REQUEST_METHOD} !^(POST|GET)$
    RewriteRule .* - [R=405,L]
    SSLEngine on
    SSLCertificateFile /config/engine/engineblock.crt
    SSLCertificateKeyFile  /config/engine/engineblock.pem
    SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
    SSLHonorCipherOrder     on
    SSLCompression          off
    ExpiresActive on
    ExpiresByType font/* "access plus 1 year"
    ExpiresByType image/* "access plus 6 months"
    ExpiresByType text/css "access plus 1 year"
    ExpiresByType text/js "access plus 1 year"
</VirtualHost>