# Cinderblock — marketing + docs vhost.
# DocumentRoot at /, both apex and app subdomain proxy to the same PM2 process
# on 127.0.0.1:3015. Next.js middleware switches the layout by Host header.
#
# After dropping this file in /etc/apache2/sites-available/:
#   sudo a2ensite cinderblock-marketing
#   sudo apache2ctl configtest
#   sudo systemctl reload apache2
#   sudo certbot --apache \
#     -d cinderblock.philiprehberger.com \
#     -d app.cinderblock.philiprehberger.com

<VirtualHost *:80>
    ServerName cinderblock.philiprehberger.com
    ServerAlias app.cinderblock.philiprehberger.com

    ProxyPreserveHost On
    ProxyAddHeaders On
    ProxyRequests Off
    ProxyPass        / http://127.0.0.1:3015/
    ProxyPassReverse / http://127.0.0.1:3015/

    RequestHeader set X-Forwarded-Proto "http"
    RequestHeader set X-Forwarded-Host "%{Host}i"

    # Long timeouts for Server-Sent Events in case future surfaces use them.
    ProxyTimeout 600

    ErrorLog ${APACHE_LOG_DIR}/cinderblock-error.log
    CustomLog ${APACHE_LOG_DIR}/cinderblock-access.log combined
RewriteEngine on
RewriteCond %{SERVER_NAME} =app.cinderblock.philiprehberger.com [OR]
RewriteCond %{SERVER_NAME} =cinderblock.philiprehberger.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

# After certbot runs, it generates the matching -le-ssl.conf and adds a
# RewriteRule redirect from port 80 to 443. Don't edit this file manually
# to add the SSL block — certbot's tracking will get out of sync.