<VirtualHost *:443>
    ServerAdmin info@example.com
    ServerName  www.example.com

    SSLProxyEngine on
    SSLProxyVerify none
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off
    SSLProxyCheckPeerExpire off

    <Proxy *>
    Order deny,allow
    Allow from all
    </Proxy>
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyPass "/" "http://127.0.0.1:3000/" keepalive=On
    # :3000 for morbo, :8082 for hypnotoad
    ProxyPassReverse "/" "http://127.0.0.1:3000/"
    RequestHeader set X-Forwarded-HTTPS "0"

    ErrorLog /home/common/logs/www.example.com/error.log
    LogLevel warn
    CustomLog /home/common/logs/www.example.com/access.log combined

    # Use the multisites cert
    SSLCertificateFile /etc/letsencrypt/live/www.example.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/www.example.com/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>

<VirtualHost *:443>
    ServerAdmin info@example.com
    ServerName  api1.example.com

    SSLProxyEngine on
    SSLProxyVerify none
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off
    SSLProxyCheckPeerExpire off

    <Proxy *>
    Order deny,allow
    Allow from all
    </Proxy>
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyPass "/" "http://127.0.0.1:3000/" keepalive=On
    ProxyPassReverse "/" "http://127.0.0.1:3000/"
    RequestHeader set X-Forwarded-HTTPS "0"

    LogLevel debug
    ErrorLog /home/common/logs/api1.example.com/error.log
    CustomLog /home/common/logs/api1.example.com/access.log combined

    SSLCertificateFile /etc/letsencrypt/live/www.example.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/www.example.com/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>

<VirtualHost *:443>
    ServerAdmin info@example.com
    ServerName  api2.example.com

    SSLProxyEngine on
    SSLProxyVerify none
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off
    SSLProxyCheckPeerExpire off

    <Proxy *>
    Order deny,allow
    Allow from all
    </Proxy>
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyPass "/" "http://127.0.0.1:3000/" keepalive=On
    ProxyPassReverse "/" "http://127.0.0.1:3000/"
    RequestHeader set X-Forwarded-HTTPS "0"

    ErrorLog /home/common/logs/api2.example.com/error.log
    LogLevel warn
    CustomLog /home/common/logs/api2.example.com/access.log combined

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /etc/letsencrypt/live/www.example.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/www.example.com/privkey.pem
</VirtualHost>

<VirtualHost *:80>
    ServerAdmin info@example.com
    ServerName  www.example.com
    RewriteEngine on
    RewriteCond %{SERVER_NAME} =www.example.com
    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

<VirtualHost *:80>
    ServerAdmin info@example.com
    ServerName  api1.example.com

    RewriteEngine on
    RewriteCond %{SERVER_NAME} =api1.example.com
    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

<VirtualHost *:80>
    ServerAdmin info@example.com
    ServerName  api2.example.com
    RewriteEngine on
    RewriteCond %{SERVER_NAME} =api2.example.com
    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>