# apache-demo.conf -- the demo terminal on the public face (issue #115). An example: the host
# name, the certificate paths and the XWiki allowed to embed it are Captain Bob's to set.
#   a2enmod proxy proxy_http proxy_wstunnel headers ssl rewrite
<VirtualHost *:443>
    ServerName try.starshipos-f18.com
    SSLEngine on
    SSLCertificateFile    /etc/letsencrypt/live/try.starshipos-f18.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/try.starshipos-f18.com/privkey.pem

    # The terminal may be framed by the "Try it" page on the .com (TryIt), and by nothing else.
    Header always unset X-Frame-Options
    Header always set Content-Security-Policy "frame-ancestors https://starshipos-f18.com https://www.starshipos-f18.com"

    ProxyPreserveHost On
    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteRule ^/ws$ ws://127.0.0.1:7681/ws [P,L]
    ProxyPass        / http://127.0.0.1:7681/
    ProxyPassReverse / http://127.0.0.1:7681/
    # A session lives up to 30 minutes; keep its websocket open that long.
    ProxyTimeout 1900
</VirtualHost>