# Deploy-hardening II Phase 1 — minimal Apache SSL config for the
# apache-test sidecar. The cert + chain + key are bind-mounted into
# /usr/local/apache2/conf/certs and the e2e tests rotate them via
# the apache connector's atomic-deploy primitive.
LoadModule ssl_module modules/mod_ssl.so
Listen 443
<VirtualHost *:443>
    ServerName apache-test.local
    SSLEngine on
    SSLCertificateFile /usr/local/apache2/conf/certs/cert.pem
    SSLCertificateKeyFile /usr/local/apache2/conf/certs/key.pem
    SSLCertificateChainFile /usr/local/apache2/conf/certs/chain.pem
</VirtualHost>