# begin vhost for <%= title %>
<VirtualHost <%= listen %>:80>
   ServerName <%= title %>.<%= hosting_domain %>
<% if server_alias != false %>   ServerAlias <%= server_alias %><% end %>
   DocumentRoot <%= docroot %>
 <% if https_redirect != false %>
    # Use HTTP Strict Transport Security to force client to use secure connections only
    Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains"

    # Redirect all HTTP to HTTPS
    RewriteEngine On
    RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [redirect=301]<% end %>
<% if redirect_match != false %>   RedirectMatch ^/$ <%= protocol %>://<%= title %>.<%= hosting_domain %>/<%= redirect_match %><% end %>
<% if redirect != false %>   Redirect <%= redirect %><% end %>
<% if aliases != false %><% aliases.each do |map| -%>
   Alias <%= map %>
<% end -%><% end -%>  
<% if use != false %><% use.each do |instance| -%>
   Use <%= instance %>
<% end -%><% end -%>
<% if mpm == true %>
   <IfModule mpm_itk_module>
     AssignUserId <%= user %> <%= gid %>
   </IfModule>
<% end %>   
</VirtualHost>
# end vhost for <%= title %>
<% if ssl == true %>
# begin ssl vhost for <%= title %>
<VirtualHost <%= listen %>:443>
   ServerName <%= title %>.<%= hosting_domain %>
<% if server_alias != false %>   ServerAlias <%= server_alias %><% end %>
   DocumentRoot <%= docroot %>
<% if redirect_match != false %>   RedirectMatch ^/$ <%= protocol %>://<%= title %>.<%= hosting_domain %>/<%= redirect_match %><% end %>
<% if redirect != false %>   Redirect <%= redirect %><% end %>
<% if aliases != false %><% aliases.each do |map| -%>
   Alias <%= map %>
<% end -%><% end -%>  
<% if use != false %><% use.each do |instance| -%>
   Use <%= instance %>
<% end -%><% end -%>
<% if mpm == true %>
   <IfModule mpm_itk_module>
     AssignUserId <%= user %> <%= gid %>
   </IfModule>
<% end %>
   # SSL Configuration
   SSLEngine on
   SSLProtocol -all +SSLv3 +TLSv1
   SSLCipherSuite HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH
   SSLHonorCipherOrder on
   SSLCertificateFile    /etc/ssl/certs/<%= title %>.crt
   SSLCertificateKeyFile /etc/ssl/private/<%= title %>.pem
</VirtualHost>
# end ssl vhost for <%= title %>
<% end %>