Założenia:

• aplikacja pythonowa jest w katalogu /var/www/pythonik.net/app,
• nasłuchuje na 127.0.0.1 na porcie 8889,
• mamy certyfikat z Let's Encrypt.

<VirtualHost *:80>
  ServerName pythonik.net:80
  ServerAlias www.pythonik.net
  Redirect permanent / https://pythonik.net/
</VirtualHost>

<VirtualHost *:443>
  ServerName pythonik.net:443
  ServerAdmin root@localhost
  
  # PreserveHost pomaga przy logowaniu
  ProxyPreserveHost On
  ProxyPass / http://127.0.0.1:8889/
  ProxyPassReverse / http://127.0.0.1:8889/

  CustomLog /var/log/httpd/vhosty-access.log combined
  ErrorLog /var/log/httpd/vhosty-errors.log

  Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
  SSLEngine on
  SSLProtocol -all +TLSv1.2

  Include /etc/letsencrypt/options-ssl-apache.conf
  SSLCertificateFile /etc/letsencrypt/live/pythonik.net/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/pythonik.net/privkey.pem

  <Directory /var/www/pythonik.net>
    AllowOverride All
    Require all granted
    Options +FollowSymLinks -Indexes
  </Directory>

</VirtualHost>