<VirtualHost *:443>

    ServerName repository-poltekes-jayapura.wanteknologi.com:443

    # Log file disesuaikan dengan nama domain agar mudah dilacak
    ErrorLog /var/log/apache2/repository-poltekes-jayapura_error.log
    TransferLog /var/log/apache2/repository-poltekes-jayapura_access.log
    LogLevel warn

    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    SSLHonorCipherOrder on
    SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

    # Jalur sertifikat SSL dari Certbot/Let's Encrypt
    # Pastikan jalur ini valid setelah Anda menjalankan perintah certbot
    SSLCertificateFile /etc/letsencrypt/live/repository-poltekes-jayapura.wanteknologi.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/repository-poltekes-jayapura.wanteknologi.com/privkey.pem
    # Chain file biasanya sudah termasuk di fullchain, tapi jika ada terpisah:
    SSLCertificateChainFile /etc/letsencrypt/live/repository-poltekes-jayapura.wanteknologi.com/chain.pem

    SetEnvIf User-Agent ".*MSIE.*" \
    nokeepalive ssl-unclean-shutdown \
    downgrade-1.0 force-response-1.0

    CustomLog /var/log/apache2/repository-poltekes-jayapura_access.log \
    "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

    # PENTING: Include konfigurasi EPrints
    # Karena Anda membuat arsip dengan ID 'pub', jalurnya biasanya di sini:
    Include /opt/eprints3/cfg/apache_ssl/repository_poltekes_jayapura.conf

    # Handler Perl EPrints
    PerlTransHandler +EPrints::Apache::Rewrite

</VirtualHost>
