Оптимизированный VirtualHost Apache 2.4 для WordPress с HTTP/2, mod_expires и mod_deflate

# /etc/apache2/sites-available/wp-apache.example.com.conf
<VirtualHost *:80>
    ServerName wp-apache.example.com
    ServerAlias www.wp-apache.example.com
    Redirect permanent / https://wp-apache.example.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName wp-apache.example.com
    DocumentRoot /var/www/wp-apache.example.com/public_html

    Protocols h2 http/1.1

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/wp-apache.example.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/wp-apache.example.com/privkey.pem

    # Подключение PHP-FPM через сокет
    <FilesMatch \\.php$>
        SetHandler "proxy:unix:/run/php/php8.2-fpm.sock|fcgi://localhost"
    </FilesMatch>

    <Directory /var/www/wp-apache.example.com/public_html>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # Сжатие mod_deflate
    <IfModule mod_deflate.c>
        AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript application/json
    </IfModule>

    # Кэширование mod_expires
    <IfModule mod_expires.c>
        ExpiresActive On
        ExpiresDefault "access plus 1 month"
        ExpiresByType image/webp "access plus 1 year"
        ExpiresByType image/jpeg "access plus 1 year"
        ExpiresByType text/css "access plus 1 year"
        ExpiresByType application/javascript "access plus 1 year"
    </IfModule>

    # Защита wp-config.php
    <Files wp-config.php>
        Require all denied
    </Files>

    ErrorLog ${APACHE_LOG_DIR}/wp-apache.example.com_error.log
    CustomLog ${APACHE_LOG_DIR}/wp-apache.example.com_access.log combined
</VirtualHost>