https://www.johndball.com/setting-virtualhost-security-configs-in-apache2/