<VirtualHost 89.36.222.238:443>
  ServerName api.riso.app
  ServerAlias www.api.riso.app
  ServerAdmin surya@riso.app

  SSLEngine On
  SSLProtocol -ALL +TLSv1.2 +TLSv1.3
  SSLCompression Off
  SSLHonorCipherOrder off
  SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:E>
  SSLVerifyDepth 10
  SSLCertificateFile /etc/letsencrypt/live/riso.app/cert.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/riso.app/privkey.pem

  ProxyPreserveHost On
  SSLProxyEngine On
  SSLProxyVerify None
  SSLProxyCheckPeerCN Off
  SSLProxyCheckPeerName Off
  ProxyPass / https://localhost:3005/ retry=0 timeout=5 connectiontimeout=2
  ProxyPassReverse / https://localhost:3005/

  ProxyTimeout 5

  LogLevel debug proxy:trace5
  ErrorLog "/var/www/riso.app/logs/error.log"
  CustomLog "/var/www/riso.app/logs/access.log" combined

  <Location />
    ProxyPassReverse /
    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1
  </Location>
</VirtualHost>