<IfModule mod_ssl.c>

        <VirtualHost *:443>

                ServerAdmin     user@domaine.tld
                ServerName      visio.futuretic.fr
                
                # Headers for security
                <IfModule mod_headers.c>
                        # Deja fourni par Jitsi
                        # Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
                        Header set X-XSS-Protection "1; mode=block"
                        Header set X-Frame-Options "sameorigin"
                        Header set X-Content-Type-Options "nosniff"
                </IfModule>

		# SSL config
                SSLEngine on
                SSLProxyEngine On
                SSLProxyVerify none
                SSLProxyCheckPeerCN off
                SSLProxyCheckPeerName off
                SSLProxyCheckPeerExpire off

                # SSL certificates
                SSLCertificateFile /etc/letsencrypt/live/visio.futuretic.fr/fullchain.pem
                SSLCertificateKeyFile /etc/letsencrypt/live/visio.futuretic.fr/privkey.pem
                Include /etc/letsencrypt/options-ssl-apache.conf

		# Proxy base parameters
                ProxyPreserveHost       On
                
                # Proxy pour certificat
                DocumentRoot /var/www/html
                ProxyPass /.well-known !

                ProxyPass / https://visio.futuretic.fr/
                ProxyPassReverse / https://visio.futuretic.fr/
                #ProxyPass "/" "https://10.0.3.211/"
                #ProxyPassReverse "/" "https://10.0.3.211/"

                # Set WebSockets
                RewriteEngine on
                RewriteCond %{HTTP:Connection} Upgrade [NC]
                RewriteCond %{HTTP:Upgrade} websocket [NC]
                RewriteRule /(.*) wss://visio.futuretic.fr/$1  [P,L]

                RequestHeader set X-Forwarded-Proto “https”
                RequestHeader set X-Forwarded-Port “443”
                #SetEnv proxy-sendchunks 1

                # Set rights
                <Proxy *>
                        Order deny,allow
                        Allow from all
                </Proxy>

                # Logs
                ErrorLog /var/log/apache2/visio.futuretic.fr.error.log
                LogLevel error
                CustomLog /var/log/apache2/visio.futuretic.fr.access.log vhost_combined

        </VirtualHost>

</IfModule>