<IfModule mod_ssl.c>
<VirtualHost *:443>
  ServerName {{ jitsi_domain }}
  ServerAdmin {{ admin_mail }}
  ErrorLog ${APACHE_LOG_DIR}/error.log
  CustomLog ${APACHE_LOG_DIR}/access.log combined

  SSLCertificateFile /etc/letsencrypt/live/{{ jitsi_domain }}/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/{{ jitsi_domain }}/privkey.pem
  Include /etc/letsencrypt/options-ssl-apache.conf

  # Encoded slashes need to be allowed
  AllowEncodedSlashes NoDecode

  # keep the host
  ProxyPreserveHost On
  SSLProxyEngine On
  SSLProxyVerify none
  SSLProxyCheckPeerCN off
  SSLProxyCheckPeerName off
  SSLProxyCheckPeerExpire off

  RequestHeader set X-Forwarded-Proto "https"
  RequestHeader set X-Forwarded-Host "{{ jitsi_domain }}"
  ProxyPass / https://127.0.0.1:8003/
  ProxyPassReverse / https://127.0.0.1:8003/

</VirtualHost>
</IfModule>