# ============================================================
# VirtualHost PRODUCTION — Laragon (serveur logimatiqueci.dyndns.org)
# À placer dans : E:/install/laragon/etc/apache2/sites-enabled/assuresuite-api.conf
# DocumentRoot : E:/install/laragon/www/assuresuite-api
#
# Structure attendue sous assuresuite-api/ :
#   upload/   (upload.php, apercu.php, telecharger.php, supprimer.php, index.php, auth.php, config.php)
#   mail/     (envoyer.php, config.php, vendor/, templates/)
#   public/uploads/   (fichiers stockés — servis via l'alias /uploads)
# ============================================================

<VirtualHost *:8282>
    DocumentRoot "E:/install/laragon/www/assuresuite-api"
    ServerName assursuite-api.com
    ServerAlias *.assursuite-api.com

    # ── Laisser PHP recevoir l'en-tête Authorization (PHP-CGI/FastCGI le filtre sinon) ──
    # Le front envoie aussi X-Auth-Token en repli, mais ceci fiabilise Authorization.
    CGIPassAuth On

    <Directory "E:/install/laragon/www/assuresuite-api/">
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # ── Service upload (/upload) ──────────────────────────────
    <Directory "E:/install/laragon/www/assuresuite-api/upload">
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
        DirectoryIndex index.php
        <IfModule mod_rewrite.c>
            RewriteEngine On
            RewriteBase /upload
            RewriteCond %{REQUEST_FILENAME} !-f
            RewriteRule ^ index.php [QSA,L]
        </IfModule>
    </Directory>

    # ── Service mail (/mail) ──────────────────────────────────
    <Directory "E:/install/laragon/www/assuresuite-api/mail">
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
        DirectoryIndex envoyer.php
    </Directory>

    # ── Fichiers uploadés publics (/uploads → public/uploads) ─
    Alias /uploads "E:/install/laragon/www/assuresuite-api/public/uploads"
    <Directory "E:/install/laragon/www/assuresuite-api/public/uploads">
        Options -Indexes -ExecCGI
        AllowOverride None
        Require all granted
        # Interdire l'exécution de tout script dans le dossier d'upload
        <FilesMatch "\.(php|phtml|php[0-9]|cgi|pl|py|sh)$">
            Require all denied
        </FilesMatch>
    </Directory>

    ErrorLog "E:/install/laragon/www/assuresuite-api/error.log"
    CustomLog "E:/install/laragon/www/assuresuite-api/access.log" common
</VirtualHost>