diff --git a/roles/webserver/files/etc/apache2/sites-available/thunix.net.conf b/roles/webserver/files/etc/apache2/sites-available/thunix.net.conf
index 4900ca4..fd0b621 100644
--- a/roles/webserver/files/etc/apache2/sites-available/thunix.net.conf
+++ b/roles/webserver/files/etc/apache2/sites-available/thunix.net.conf
@@ -1,6 +1,8 @@
-<VirtualHost *:80>
+<VirtualHost *:80 *:443>
     ServerAdmin webmaster@thunix.net
     ServerName thunix.net
+    SSLEngine on
+    ServerAlias i5pmp326di6rgydkk4vzjbevncwkdreli2aak72btpg7sofhsadqqeid.onion thunix.tilde
     DocumentRoot /var/www/thunix.cf
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
@@ -10,37 +12,13 @@
         Require all granted
     </Directory>
     <Directorymatch "^/.*/\.git/">
-                Order deny,allow
-                Deny from all
-        </Directorymatch>
-#    Redirect permanent / https://thunix.net/
-</VirtualHost>
-<IfModule mod_ssl.c>
-<VirtualHost *:443>
-    ServerAdmin webmaster@thunix.net
-    ServerName thunix.net
-    DocumentRoot /var/www/thunix.cf
-    ErrorLog ${APACHE_LOG_DIR}/error.log
-    CustomLog ${APACHE_LOG_DIR}/access.log combined
-    <Directory /var/www/thunix.cf>
-        Options FollowSymLinks
-        AllowOverride All
-        Require all granted
-    </Directory>
-    <Directorymatch "^/.*/\.git/">
-                Order deny,allow
-                Deny from all
-        </Directorymatch>
-    <IfModule mod_userdir.c>
-       UserDir public_html
-       UserDir disabled root
-       <Directory /home/*/public_html>
-               AllowOverride FileInfo AuthConfig Limit Indexes
-               Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
-               Require method GET POST OPTIONS
-       </Directory>
-        </IfModule>
-#Include /etc/letsencrypt/options-ssl-apache.conf
-SSLCertificateFile /etc/letsencrypt/live/thunix.net/fullchain.pem
-SSLCertificateKeyFile /etc/letsencrypt/live/thunix.net/privkey.pem
+        Order deny,allow
+        Deny from all
+    </Directorymatch>
+    RewriteEngine On
+    # Redirect permanent / https://thunix.net
+
+    SSLCertificateFile "/etc/letsencrypt/live/thunix.net/cert.pem"
+    SSLCertificateChainFile "/etc/letsencrypt/live/thunix.net/fullchain.pem"
+    SSLCertificateKeyFile "/etc/letsencrypt/live/thunix.net/privkey.pem"
 </VirtualHost>
\ No newline at end of file