# HTTPS — Let's Encrypt hanya untuk work.rycroftapparel.com (folder cert terpisah di live/work.rycroftapparel.com/)
<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerAdmin info@rycroftapparel.com
    ServerName work.rycroftapparel.com

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/work.rycroftapparel.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/work.rycroftapparel.com/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf

    Header always set X-Content-Type-Options nosniff
    Header always set X-Frame-Options SAMEORIGIN
    Header always set Referrer-Policy strict-origin-when-cross-origin

    ProxyPreserveHost On
    ProxyPass / http://127.0.0.1:3020/
    ProxyPassReverse / http://127.0.0.1:3020/

    RequestHeader set X-Forwarded-Proto "https"
    RequestHeader set X-Forwarded-Port "443"

    ErrorLog ${APACHE_LOG_DIR}/work.rycroftapparel.com_ssl_error.log
    CustomLog ${APACHE_LOG_DIR}/work.rycroftapparel.com_ssl_access.log combined
</VirtualHost>
</IfModule>