apache-config.conf

WSGIPythonPath /var/www/deinplugin:/usr/local/lib/python3.11/site-packages

<VirtualHost *:443>

    WSGIApplicationGroup %{GLOBAL}
    WSGIScriptAlias / /var/www/deinplugin/deinplugin/wsgi.py
    WSGIPassAuthorization On

    ServerAdmin webmaster@localhost

    <Directory /var/www/deinplugin>
        <Files wsgi.py>
            Require all granted
        </Files>
    </Directory>

    Alias /static/ /var/www/deinplugin/collected-static/

    ErrorLog /var/www/logs/error.log
    CustomLog /var/www/logs/access.log combined

    SSLEngine               on
    SSLHonorCipherOrder     on
    SSLCompression          off
    SSLProtocol             all -SSLv2 -SSLv3
    SSLCipherSuite          ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
    SSLCertificateFile      /certs/fullchain.pem
    SSLCertificateKeyFile   /certs/privkey.pem
    SSLOptions              +StrictRequire

</VirtualHost>