apache2.conf

<IfModule mod_ssl.c>
<VirtualHost *:443>
#        Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
        ServerAdmin marshall@oxagast.org
        DocumentRoot /var/www/spaste.oxasploits.com
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
	ServerName spaste.oxasploits.com
#	Include /etc/letsencrypt/options-ssl-apache.conf
	ServerAlias spaste
<Directory "/var/www/spaste.oxasploits.com/">
        Options +Indexes +FollowSymLinks -ExecCGI
        require all granted
#        AllowOverride None

</Directory>
<Location "/p/">
        Options -Indexes +FollowSymLinks -ExecCGI
require all granted
</Location>
<FilesMatch "^[^.]+$">
    ForceType text/plain
</FilesMatch>

SSLCertificateFile /etc/letsencrypt/live/spaste.oxasploits.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/spaste.oxasploits.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>