Set-up note: I symlinked /app/data/public to the OpenEMR root directory by running

ln -s /app/data/openemr /app/data/public

After a successful installation, the following post-install message appeared,

The "/app/data/openemr/sites/*/documents" directory contain patient information, and it is important to secure these directories. Additionally, some settings are required for the Zend Framework to work in OpenEMR. This can be done by pasting the below to end of your apache configuration file:

  <Directory "/app/data/openemr">
      AllowOverride FileInfo
      Require all granted
  </Directory>
  <Directory "/app/data/openemr/sites">
      AllowOverride None
  </Directory>
  <Directory "/app/data/openemr/sites/*/documents">
      Require all denied
  </Directory>

My current /app/data/apache/app.conf looks like this (I have made NO changes to what Cloudron created):

ServerName %{HTTP_HOST}
  
<VirtualHost *:80>
    DocumentRoot /app/data/public

    LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
    CustomLog "|/bin/cat" proxy
    ErrorLog "|/bin/cat"

    <Directory /app/data/public>
        Options +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # Do not remove this include. It's required for your app to see the Real IP
    Include "/app/code/apache/rpaf.conf"
    # This line can be commented out, if you do no require PHPMyAdmin Access
    Include "/app/code/apache/phpmyadmin.conf"

</VirtualHost>

Question: do I just add the recommended apache directives at the end of /app/data/apache/app.conf as recommended?

(I'm sorry if this is such a "duh" question. Frankly it was my struggles and ultimate headbanging configuring apache that had me searching for a better way and finding Cloudron. I have about 15 apps installed and I've never had to fuss with apache previously. Thanks for your patience.)