# Alternativa Apache para produção: /etc/apache2/sites-available/drilharob.conf
# Requer: a2enmod rewrite ssl headers; certificados via `certbot --apache -d drilharob.ao -d www.drilharob.ao -d admin.drilharob.ao`
<VirtualHost *:80>
    ServerName drilharob.ao
    ServerAlias www.drilharob.ao admin.drilharob.ao
    RewriteEngine On
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</VirtualHost>

<VirtualHost *:443>
    # Site público e portal partilham a aplicação; o Laravel separa-os pelo host (ADMIN_DOMAIN).
    ServerName drilharob.ao
    ServerAlias www.drilharob.ao admin.drilharob.ao
    DocumentRoot /var/www/drilharob/current/public

    RewriteEngine On
    RewriteCond %{HTTP_HOST} ^www\. [NC]
    RewriteRule ^ https://drilharob.ao%{REQUEST_URI} [L,R=301]

    <Directory /var/www/drilharob/current/public>
        Options FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/drilharob.ao/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/drilharob.ao/privkey.pem

    ErrorLog ${APACHE_LOG_DIR}/drilharob_error.log
    CustomLog ${APACHE_LOG_DIR}/drilharob_access.log combined
</VirtualHost>