<VirtualHost *:80>
    ServerAdmin hi@coryd.dev
    ServerName coryd.dev
    Redirect permanent / https://www.coryd.dev/
</VirtualHost>

<VirtualHost *:443>
    ServerAdmin hi@coryd.dev
    ServerName coryd.dev
    Redirect permanent / https://www.coryd.dev/

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/coryd.dev/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/coryd.dev/privkey.pem
</VirtualHost>

<VirtualHost *:443>
    ServerAdmin hi@coryd.dev
    ServerName www.coryd.dev
    DocumentRoot /var/www/coryd.dev

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/coryd.dev/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/coryd.dev/privkey.pem

    SetEnv POSTGREST_URL "{{POSTGREST_URL}}"
    SetEnv POSTGREST_API_KEY "{{POSTGREST_API_KEY}}"
    SetEnv BASE_URL "https://www.coryd.dev"
    SetEnv FORWARDEMAIL_API_KEY "{{FORWARDEMAIL_API_KEY}}"
    SetEnv MASTODON_ACCESS_TOKEN "{{MASTODON_ACCESS_TOKEN}}"
    SetEnv MASTODON_SYNDICATION_TOKEN "{{MASTODON_SYNDICATION_TOKEN}}"
    SetEnv BOOK_IMPORT_TOKEN "{{BOOK_IMPORT_TOKEN}}"
    SetEnv WATCHING_IMPORT_TOKEN "{{WATCHING_IMPORT_TOKEN}}"
    SetEnv TMDB_API_KEY "{{TMDB_API_KEY}}"
    SetEnv SEASONS_IMPORT_TOKEN "{{SEASONS_IMPORT_TOKEN}}"
    SetEnv NAVIDROME_SCROBBLE_TOKEN "{{NAVIDROME_SCROBBLE_TOKEN}}"
    SetEnv NAVIDROME_API_URL "{{NAVIDROME_API_URL}}"
    SetEnv NAVIDROME_API_TOKEN "{{NAVIDROME_API_TOKEN}}"
    SetEnv ARTIST_IMPORT_TOKEN "{{ARTIST_IMPORT_TOKEN}}"

    SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
    RequestHeader set Authorization "%{HTTP_AUTHORIZATION}e" env=HTTP_AUTHORIZATION

    <Directory /var/www/coryd.dev/>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride All
        Require all granted
    </Directory>

    <FilesMatch \.php$>
        SetHandler "proxy:unix:/var/run/php/php8.3-fpm.sock|fcgi://localhost/"
    </FilesMatch>
</VirtualHost>