ServerName global.hexstream.dev DocumentRoot /home/websites/global.hexstream.dev/public/ Require all granted AllowOverride All SSLEngine on SSLCertificateFile /etc/apache2/certs/hexstream.dev.pem SSLCertificateKeyFile /etc/apache2/certs/hexstream.dev.key SSLVerifyClient require SSLVerifyDepth 1 SSLCACertificateFile /etc/apache2/certs/origin-pull-ca.pem Header set Access-Control-Allow-Origin "*" Header set Access-Control-Allow-Methods "GET" Header set Access-Control-Max-Age "604800"