<VirtualHost *:443>
    ServerName contratos.tudominio.com
    DocumentRoot /var/www/sorc-contracts/public

    <Directory /var/www/sorc-contracts/public>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # Nunca exponer el resto del proyecto
    <Directory /var/www/sorc-contracts/app>
        Require all denied
    </Directory>
    <Directory /var/www/sorc-contracts/storage>
        Require all denied
    </Directory>

    SSLEngine on
    SSLCertificateFile      /etc/letsencrypt/live/contratos.tudominio.com/fullchain.pem
    SSLCertificateKeyFile   /etc/letsencrypt/live/contratos.tudominio.com/privkey.pem

    ErrorLog  ${APACHE_LOG_DIR}/sorc_error.log
    CustomLog ${APACHE_LOG_DIR}/sorc_access.log combined
</VirtualHost>

<VirtualHost *:80>
    ServerName contratos.tudominio.com
    Redirect permanent / https://contratos.tudominio.com/
</VirtualHost>
