Certificat SSL :

mkdir /etc/apache2/ssl

openssl req -x509 -nodes -days 1095 -newkey rsa:2048 -out /etc/apache2/ssl/server.crt -keyout /etc/apache2/ssl/server.key
openssl req -x509 -nodes -days 2095 -newkey rsa:2048 -out /etc/apache2/ssl/bboxdoc.atnet.fr/bboxdoc.crt -keyout /etc/apache2/ssl/bboxdoc.atnet.fr/bboxdoc.key
(FQDN doit être votre nom de domaine)


sudo a2enmod ssl
sudo a2ensite default-ssl
systemctl reload apache2
ou sudo service apache2 reload

((((((((((((((ln -s /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-enabled/000-default-ssl.conf))))))))))))

nano /etc/apache2/sites-available/default-ssl.conf

changer ces 2 lignes
SSLCertificateFile    /etc/apache2/ssl/server.crt
SSLCertificateKeyFile /etc/apache2/ssl/server.key

service apache2 restart 

nano /etc/apache2/sites-available/000-default.conf
(capture1)

Redirect permanent / https://nom de domaine/

#### nano /etc/apache2/sites-available/default-ssl.conf 
(capture2)

ServerName champarnaud.ddns.net
<IfModule mod_headers.c>
  Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
</IfModule>

sudo a2ensite default-ssl
service apache2 restart