# /etc/apache2/sites-available/postsyncpro.gventure.info-le-ssl.conf
# HTTPS — reverse proxy to Next.js (PORT must match .env.local on server)

<IfModule mod_ssl.c>
<VirtualHost *:443>

    ServerName postsyncpro.gventure.info

    # Not used for app traffic (ProxyPass handles everything); kept for certbot/tools
    DocumentRoot /var/www/html/gventure/postsync_pro

    <Directory /var/www/html/gventure/postsync_pro>
        Options -Indexes +FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>

    # Tell Next.js the original request was HTTPS (cookies, redirects)
    RequestHeader set X-Forwarded-Proto "https"
    RequestHeader set X-Forwarded-Host "postsyncpro.gventure.info"
    RequestHeader set X-Forwarded-Port "443"

    ProxyPreserveHost On
    ProxyRequests Off

    # Must match PORT=3033 in /var/www/html/gventure/postsync_pro/.env.local
    ProxyPass        "/" "http://127.0.0.1:3033/"
    ProxyPassReverse "/" "http://127.0.0.1:3033/"

    ErrorLog ${APACHE_LOG_DIR}/postsyncpro.gventure.info-error.log
    CustomLog ${APACHE_LOG_DIR}/postsyncpro.gventure.info-access.log combined

    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/postsyncpro.gventure.info/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/postsyncpro.gventure.info/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf

</VirtualHost>
</IfModule>