/etc/httpd.conf

types { include "/usr/share/misc/mime.types" }
default type text/plain
server "default" {
    listen on * port 80 
    root "/htdocs/athome.tld" 
} 
server "athome.tld" {
    listen on * port 80
    block return 301 "https://$SERVER_NAME$REQUEST_URI"
}
server "athome.tld" { 
    alias "www.athome.tld"
    listen on * tls port 443 
    root "/htdocs/athome.tld" 
    directory index index.html
    log style combined
    hsts preload
    tls {
        certificate "/etc/ssl/athome.tld.crt"
        key "/etc/ssl/private/athome.tld.key"
    }
    location "/.well-known/acme-challenge/*" {
        root "/acme"
        request strip 2
    }
    location "/Blog/" {
        directory index index.php
    }
    location "*.php*" {
        fastcgi socket "/run/php-fpm.sock"
    }
    location "/DL/PDF/" {
        directory auto index
    }
    location "/private/" {
        authenticate "education" with "/htdocs/private.htpw"
        directory auto index
    }
}
server "site2.athome.tld" { 
    alias "www.site2.athome.tld"
    listen on * port 80 
    listen on * tls port 443 
    root "/htdocs/site2" 
    directory index index.html
    log access "site2.log"
    hsts 
    tls {
        certificate "/etc/ssl/athome.tld.crt"
        key "/etc/ssl/private/athome.tld.key"
    }
    location "/.well-known/acme-challenge/*" {
        root "/acme"
        request strip 2
    }
    location "*.php*" {
        fastcgi socket "/run/php-fpm.sock"
    }
    location "/downloads/" {
        directory index index.php
    }
}