#########################################
# Payee Portal Apache Configuration File
#########################################


<VirtualHost *:443>
    ServerAdmin webmaster@royaltyshare.com
    ServerName portal.royaltyshare.com

    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
#    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
    SSLCertificateKeyFile /etc/httpd/ssl.key/server.key
    SSLCertificateFile /etc/httpd/ssl.crt/STAR_royaltyshare_com.crt
    SSLCertificateChainFile /etc/httpd/ssl.crt/STAR_royaltyshare_com.ca-bundle

    SetEnvIf User-Agent ".*MSIE.*" \
             nokeepalive ssl-unclean-shutdown \
             downgrade-1.0 force-response-1.0

    PerlSetVar CLIENT_ID 989


    RewriteEngine ON
    DocumentRoot "/app/tools/pp-frontend/build"

    <Location  />
       Require all granted
    </Location>

    RewriteCond %{DOCUMENT_ROOT}%{REQUEST_URI} -f [OR] 
    RewriteCond %{DOCUMENT_ROOT}%{REQUEST_URI} -d
    RewriteRule ^ - [L]

    # Fallback all other routes to index.html
    RewriteRule ^ /app/tools/pp-frontend/build/index.html [L]

    ErrorDocument 403 /index.html
    ErrorDocument 404 /index.html
    ErrorDocument 500 /index.html

    # Prevent access to main RoyaltyShare code
    <Location /app>
       Deny from all
    </Location>
#    <Location /rps>
#       Deny from all
#    </Location>
    <Location /media>
       Deny from all
    </Location>
    <Location /rsws>
       Deny from all
    </Location>
    <Location /support>
       Deny from all
    </Location>
    <Location /include>
       Deny from all
    </Location>
    <Location /admin>
       Deny from all
    </Location>
    <Location /bookpub>
       Deny from all
    </Location>
</VirtualHost>