From 6f9c78119ded95f37f2c547ab4b25fd2b194f025 Mon Sep 17 00:00:00 2001
From: Kishan Takoordyal <kishan@kinesis.games>
Date: Sat, 20 May 2023 20:35:14 +0000
Subject: [PATCH] Update reverse_proxy_ssl.conf

---
 Section_07/reverse_proxy_ssl.conf | 26 +++++++++++++++++++++++---
 1 file changed, 23 insertions(+), 3 deletions(-)

diff --git a/Section_07/reverse_proxy_ssl.conf b/Section_07/reverse_proxy_ssl.conf
index 1e46b4e..5d6a684 100644
--- a/Section_07/reverse_proxy_ssl.conf
+++ b/Section_07/reverse_proxy_ssl.conf
@@ -1,13 +1,33 @@
 <VirtualHost *:80>
       ServerName demo-devops-api.konnect.dev
+      ServerAdmin webmaster@localhost
+      Redirect permanent / https://​demo-devops-api.konnect.dev
+</VirtualHost>
+
+<VirtualHost *:443>
+      ServerName demo-devops-api.konnect.dev
       
       ServerAdmin webmaster@localhost
 
-      ErrorLog ${APACHE_LOG_DIR}/error.log
-      CustomLog ${APACHE_LOG_DIR}/access.log combined
-
       ProxyRequests Off
       ProxyPreserveHost On
       ProxyPass / http://localhost:5000/
       ProxyPassReverse / ​http://localhost:5000/
+
+      ErrorLog ${APACHE_LOG_DIR}/error.log
+      CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+      SSLEngine On
+      SSLProxyEngine On
+      SSLProxyCheckPeerName Off
+      SSLProxyCheckPeerCN Off
+      SSLProxyVerify none
+
+      Include /etc/letsencrypt/options-ssl-apache.conf
+      SSLCertificateFile /etc/letsencrypt/live/demo-devops-api.konnect.dev/fullchain.pem
+      SSLCertificateKeyFile /etc/letsencrypt/live/demo-devops-api.konnect.dev/privkey.pem
+      
+      RequestHeader set X-Forwarded-Proto https
+      RequestHeader set X-Forwarded-Port 443
 </VirtualHost>
+