<VirtualHost *:443>
    ServerAdmin webmaster@signage-next.net
    ServerName face.signage-next.net

    DocumentRoot /var/www/html

    <Directory /var/www/html>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # SSL設定（Let's Encrypt）
    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/face.signage-next.net/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/face.signage-next.net/privkey.pem

    # ログ設定
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    # セキュリティヘッダー
    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-Content-Type-Options "nosniff"
</VirtualHost>
