ServerName api.wockhardtonline.com ServerAdmin webmaster@localhost # ----------------------------- # ✅ REVERSE PROXY # ----------------------------- ProxyPreserveHost On ProxyPass / http://localhost:5000/ ProxyPassReverse / http://localhost:5000/ # ----------------------------- # ✅ ENABLE REWRITE # ----------------------------- RewriteEngine On # ----------------------------- # ✅ HANDLE CORS PREFLIGHT (OPTIONS) # ----------------------------- RewriteCond %{REQUEST_METHOD} OPTIONS RewriteRule ^(.*)$ $1 [R=200,L] # ----------------------------- # ✅ CORS HEADERS # ----------------------------- Header always set Access-Control-Allow-Origin "https://wockhardtonline.com" Header always set Access-Control-Allow-Credentials "true" Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS" Header always set Access-Control-Allow-Headers "Content-Type, Authorization, apikey, apptoken, jwttoken" # ----------------------------- # ✅ INCREASE REQUEST SIZE (100MB) # ----------------------------- LimitRequestBody 104857600 # ----------------------------- # ✅ OPTIONAL: FIX MOD_SECURITY (if enabled) # ----------------------------- SecRuleEngine Off SecRequestBodyLimit 104857600 SecRequestBodyNoFilesLimit 104857600 # ----------------------------- # ✅ BLOCK HIDDEN FILES # ----------------------------- Require all denied # ----------------------------- # ✅ LOGS # ----------------------------- ErrorLog ${APACHE_LOG_DIR}/wockhardt-api-error.log CustomLog ${APACHE_LOG_DIR}/wockhardt-api-access.log combined # ----------------------------- # ✅ SSL CONFIG # ----------------------------- SSLEngine on SSLCertificateFile /etc/ssl/api_wockhardtonline_com/fullchain.crt SSLCertificateKeyFile /etc/ssl/api_wockhardtonline_com/api_wockhardtonline_com.key