#
# roundcube webmailer
#
<VirtualHost *:80>
        ServerAdmin webmaster@nausch.org
        ServerName webmail.nausch.org
        ServerPath /

        <Location />
                Options -Indexes FollowSymLinks
                Order allow,deny
                Allow from all
        </Location>

        RewriteEngine on
        RewriteCond %{HTTPS} off
        RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

        DirectoryIndex index.php
        ErrorLog logs/webmail_error.log
        CustomLog logs/webmail_access.log combined
</VirtualHost>
<VirtualHost *:443>
        ServerAdmin webmaster@nausch.org
        ServerName webmail.nausch.org
        ServerPath /
        DocumentRoot "/usr/share/roundcubemail"

        # Django
        # Required, because there is a host with same ServerName and
        # ServerAlias LISTENING ON PORT 80, - and if these lines are
        # not present, and .htaccess-Files or LDAP-Access is enabled
        # for one or more Directory the host on PORT 443 and PORT 80
        # will ASK for .htaccess ord LDAP-Access, so please remember
        # ----------------------------------------------------------
        # -- DO NOT DELETE THE FOLLOWING LINES, STARTING WITH SSL --
        # --         WHEN USING .htaccess or LDAP-Access!         --
        # ----------------------------------------------------------
        SSLEngine on
        SSLProtocol -ALL +SSLv3 +TLSv1
        SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
        SSLCertificateFile /etc/pki/tls/private/CAcert-class3-wildcard.crt
        SSLCertificateKeyFile /etc/pki/tls/private/ca.key
        SSLCertificateChainFile /etc/pki/tls/private/CAcert_chain.crt

        <Directory "/usr/share/roundcubemail">
                Options FollowSymLinks
                Order allow,deny
                Allow from all
        </Directory>

        DirectoryIndex index.php
        ErrorLog logs/webmail_error.log
        CustomLog logs/webmail_access.log combined
</VirtualHost>