<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerAdmin admin@learnitive.com
    ServerName preview.learnitive.com

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/preview.learnitive.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/preview.learnitive.com/privkey.pem

    ProxyPreserveHost On
    ProxyRequests Off
    RequestHeader set X-Forwarded-Proto "https"
    RequestHeader set X-Forwarded-Port "443"

    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteCond %{HTTP:Connection} upgrade [NC]
    RewriteRule ^/(.*)$ ws://127.0.0.1:4210/$1 [P,L]

    ProxyPass        / http://127.0.0.1:4210/
    ProxyPassReverse / http://127.0.0.1:4210/

    Header always unset X-Frame-Options
    Header always set X-Content-Type-Options "nosniff"
    Header always set Referrer-Policy "no-referrer"
    Header always set Cross-Origin-Resource-Policy "cross-origin"
    Header always add Content-Security-Policy "frame-ancestors https://edu.learnitive.com https://www.learnitive.com"
    Header always set Strict-Transport-Security "max-age=31536000"

    ErrorLog ${APACHE_LOG_DIR}/learnitive-preview-error.log
    CustomLog ${APACHE_LOG_DIR}/learnitive-preview-access.log combined
</VirtualHost>
</IfModule>