<IfModule mod_ssl.c> <VirtualHost *:443> ServerName pesentiket.com ServerAlias www.pesentiket.com ProxyPreserveHost On ProxyPass / http://127.0.0.1:3000/ ProxyPassReverse / http://127.0.0.1:3000/ # WebSocket support untuk Next.js HMR RewriteEngine On RewriteCond %{HTTP:Upgrade} websocket [NC] RewriteCond %{HTTP:Connection} upgrade [NC] RewriteRule ^/?(.*) ws://127.0.0.1:3000/$1 [P,L] # Security Headers Header always set X-Content-Type-Options "nosniff" Header always set X-Frame-Options "SAMEORIGIN" Header always set Referrer-Policy "strict-origin-when-cross-origin" Header always set Permissions-Policy "camera=(self), microphone=(), geolocation=(self)" Include /etc/letsencrypt/options-ssl-apache.conf SSLCertificateFile /etc/letsencrypt/live/pesentiket.com/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/pesentiket.com/privkey.pem </VirtualHost> </IfModule>