<VirtualHost *:80>
    ServerName api.almanac.philiprehberger.com
    DocumentRoot /var/www/almanac/current/public

    <Directory /var/www/almanac/current/public>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # SSE chat streaming needs the proxy not to buffer + long timeouts.
    # Apache doesn't buffer responses by default for php-fpm, but the
    # FCGI proxy timeout needs raising past Apache's 30s default.
    ProxyTimeout 600

    # Public demo CORS — almanac.philiprehberger.com talks to this host
    # cross-origin. Per-workspace `allowed_chat_origins` provides the
    # production-grade variant; the vhost-level allowlist below covers
    # the public-demo case without round-tripping every preflight to PHP.
    Header always set Access-Control-Allow-Origin "https://almanac.philiprehberger.com" "expr=%{REQUEST_URI} =~ m#^/v1/#"
    Header always set Access-Control-Allow-Methods "GET, POST, PATCH, DELETE, OPTIONS" "expr=%{REQUEST_URI} =~ m#^/v1/#"
    Header always set Access-Control-Allow-Headers "Authorization, Content-Type, Accept" "expr=%{REQUEST_URI} =~ m#^/v1/#"
    Header always set Access-Control-Max-Age "300" "expr=%{REQUEST_URI} =~ m#^/v1/#"
    Header always set Access-Control-Allow-Credentials "true" "expr=%{REQUEST_URI} =~ m#^/v1/#"
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteCond %{REQUEST_URI} ^/v1/
    RewriteRule ^(.*)$ $1 [R=204,L]

    ErrorLog ${APACHE_LOG_DIR}/api-almanac-error.log
    CustomLog ${APACHE_LOG_DIR}/api-almanac-access.log combined
</VirtualHost>