# Logs and the PID file must go to writable paths: /var/log/apache2 and
# /var/run/apache2 are root-owned in the image, and this container runs as an
# unprivileged uid so that it matches the owner of the bind-mounted tree.
ErrorLog /dev/stderr
PidFile /tmp/apache2.pid
ServerName localhost

<Directory /var/www/html>
    Options FollowSymLinks
    AllowOverride All
    Require all granted
</Directory>

# Fonts are the only subresource the browser always fetches in CORS mode, and
# WordPress emits asset URLs from WP_HOME — so opening the site at any other
# host turns every font into a blocked cross-origin request. Fine on a local
# rig; never in production.
<IfModule mod_headers.c>
    <FilesMatch "\.(woff2?|ttf|otf|eot)$">
        Header always set Access-Control-Allow-Origin "*"
    </FilesMatch>
</IfModule>