# vrac.conf
<VirtualHost *:80>
  ServerName vrac.gilbow.org
  Include letsencrypt-challenge.conf
</VirtualHost>


# vrac-ssl.conf
<VirtualHost *:443>

  ServerName vrac.gilbow.org
  ServerAdmin webmaster@gilbow.org

  DocumentRoot /var/www/vrac

# SSL
  SSLEngine on
  SSLCertificateFile     /var/lib/letsencrypt/vrac.pem
  SSLCertificateKeyFile  /var/lib/letsencrypt/domain.key

</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet


#letsencrypt-challenge.conf

 # letsencrypt challenge
 Alias /.well-known/acme-challenge/ /var/www/acme-challenge/
 <Directory /var/www/acme-challenge/>
   AllowOverride None
   Require all granted
 </Directory>

 # redirect but acme-challenge
 <IfModule mod_rewrite.c>
   <IfModule mod_ssl.c>
     RewriteEngine On
     RewriteCond %{HTTPS} off
     RewriteCond %{HTTP_HOST} !plain.gilbow.org
     RewriteCond %{REQUEST_URI} !^\/\.well-known\/acme-challenge\/.*$
     RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L]
   </IfModule>
 </IfModule>