# Listen on 8089 for HTTPS inside the container
Listen 8089

# Keep common modules loaded (container already enables these, safe if duplicated)
# LoadModule rewrite_module modules/mod_rewrite.so
# LoadModule headers_module modules/mod_headers.so
# LoadModule ssl_module modules/mod_ssl.so
# LoadModule proxy_module modules/mod_proxy.so
# LoadModule proxy_http_module modules/mod_proxy_http.so
# LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so
# LoadModule expires_module modules/mod_expires.so

# SSL VirtualHost on 8089
<VirtualHost _default_:8089>
    ServerName uat-test-workforceapp.aaleepheonixsolutions.com

    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/uat-test-workforceapp.aaleepheonixsolutions.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/uat-test-workforceapp.aaleepheonixsolutions.com/privkey.pem

    # Serve Laravel from /public
    DocumentRoot /var/www/html/public
    <Directory /var/www/html/public>
        AllowOverride All
        Require all granted
        Options FollowSymLinks
    </Directory>

    # Optional security headers
    Header always set X-Frame-Options SAMEORIGIN
    Header always set X-Content-Type-Options nosniff
    Header always set Referrer-Policy "strict-origin-when-cross-origin"

    # Logs
    ErrorLog  /proc/self/fd/2
    CustomLog /proc/self/fd/1 combined
</VirtualHost>

# Keep a sane log format (optional if globally defined)
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

