# ==============================================================================
# 1Anon.net - Apache 2.4+ VirtualHost Configuration (1anon.net)
# Target IP      : 162.213.248.20
# System User    : oneanonnet
# DocumentRoot   : /home/oneanonnet/public_html
# Deployment Path: /etc/apache2/sites-available/1anon.net.conf
#                  or /usr/local/apps/apache/etc/conf.d/webuzoVH.conf
# ==============================================================================

<VirtualHost 162.213.248.20:80 *:80>
    ServerName 1anon.net
    ServerAlias www.1anon.net
    ServerAdmin admin@1anon.net

    DocumentRoot "/home/oneanonnet/public_html"
    DirectoryIndex index.php index.html

    <Directory "/home/oneanonnet/public_html">
        Options -Indexes +FollowSymLinks -MultiViews
        AllowOverride All
        Require all granted
    </Directory>

    # Protect sensitive configuration & storage directories at VirtualHost level
    <FilesMatch "^(db_connect\.php|database\.sql|install_debug\.log|\.env.*|\.htaccess)$">
        Require all denied
    </FilesMatch>

    # Security Headers (mod_headers)
    <IfModule mod_headers.c>
        Header always set X-Content-Type-Options "nosniff"
        Header always set X-Frame-Options "SAMEORIGIN"
        Header always set X-XSS-Protection "1; mode=block"
        Header always set Referrer-Policy "strict-origin-when-cross-origin"
        Header always unset X-Powered-By
    </IfModule>

    ErrorLog "/home/oneanonnet/logs/1anon.net-error.log"
    CustomLog "/home/oneanonnet/logs/1anon.net-access.log" combined
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost 162.213.248.20:443 *:443>
    ServerName 1anon.net
    ServerAlias www.1anon.net
    ServerAdmin admin@1anon.net

    DocumentRoot "/home/oneanonnet/public_html"
    DirectoryIndex index.php index.html

    SSLEngine on
    SSLCertificateFile      /etc/letsencrypt/live/1anon.net/fullchain.pem
    SSLCertificateKeyFile   /etc/letsencrypt/live/1anon.net/privkey.pem

    <Directory "/home/oneanonnet/public_html">
        Options -Indexes +FollowSymLinks -MultiViews
        AllowOverride All
        Require all granted
    </Directory>

    <FilesMatch "^(db_connect\.php|database\.sql|install_debug\.log|\.env.*|\.htaccess)$">
        Require all denied
    </FilesMatch>

    <IfModule mod_headers.c>
        Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
        Header always set X-Content-Type-Options "nosniff"
        Header always set X-Frame-Options "SAMEORIGIN"
        Header always set X-XSS-Protection "1; mode=block"
        Header always set Referrer-Policy "strict-origin-when-cross-origin"
        Header always unset X-Powered-By
    </IfModule>

    ErrorLog "/home/oneanonnet/logs/1anon.net-ssl-error.log"
    CustomLog "/home/oneanonnet/logs/1anon.net-ssl-access.log" combined
</VirtualHost>
</IfModule>