From 926aeb5f84e1a59bcade801e09f1b33703bc8c1b Mon Sep 17 00:00:00 2001
From: Kyle Bowman <kyle+github@rocketbowman.com>
Date: Sat, 11 Oct 2025 18:42:31 -0400
Subject: [PATCH] add SSL redirect to config

---
 deb-repo.conf | 31 +++++++++++++++++++++++++------
 1 file changed, 25 insertions(+), 6 deletions(-)

diff --git a/deb-repo.conf b/deb-repo.conf
index ce2372b..d7d5739 100644
--- a/deb-repo.conf
+++ b/deb-repo.conf
@@ -1,13 +1,32 @@
 <VirtualHost *:80>
-    ServerName SERVER_NAME_PLACEHOLDER
-    DocumentRoot /path/to/STORE_PLACEHOLDER
+    ServerName YOUR_SERVER
+
+    # Redirect root requests to the https version
+    Redirect permanent / https://YOUR_SERVER
+    
+    # If there's some additional stuff in the URI, send that too
+    RewriteEngine on
+    RewriteCond %{SERVER_NAME} =YOUR_SERVER
+    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
+</VirtualHost>
+
+<VirtualHost *:443>
+    ServerName YOUR_SERVER
+    DocumentRoot /path/to/parent/of/dists
  
-    <Directory /path/to/STORE_PLACEHOLDER>
+    <Directory /path/to/parent/of/dists>
         Options Indexes FollowSymLinks
         AllowOverride None
         Require all granted
-    </Directory>
+    </Directory>    
+
+    # Use SSL/TLS Encryption - you may have to regenerate certificate to add new
+    # subdomain if you added one to your server
+    SSLEngine on  
+    Include /etc/letsencrypt/options-ssl-apache.conf  
+    SSLCertificateFile /path/to/fullchain/cert
+    SSLCertificateKeyFile /path/to/private/cert
     
-    ErrorLog ${APACHE_LOG_DIR}/debian-repo-error.log
+    ErrorLog ${APACHE_LOG_DIR}/debian-repo-error.log  
     CustomLog ${APACHE_LOG_DIR}/debian-repo-access.log combined
-</VirtualHost>
\ No newline at end of file
+</VirtualHost>
-- 
2.39.5