<VirtualHost *:80>

	ServerName guaca.kesaco.net
	Redirect permanent / https://guaca.kesaco.net

</VirtualHost>

<VirtualHost *:80>

	ServerName cloud.kesaco.net
	Redirect permanent / https://cloud.kesaco.net

</VirtualHost>

<VirtualHost *:443>

    ServerName guaca.kesaco.net

    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/guaca.kesaco.net/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/guaca.kesaco.net/privkey.pem

        SSLProxyEngine On
        SSLProxyCheckPeerCN Off
        SSLProxyCheckPeerName Off
        SSLProxyVerify none
        ProxyPreserveHost On
        ProxyPass / https://192.168.20.2/
        ProxyPassReverse / https://192.168.20.2/
        RedirectMatch ^/$ https://192.168.20.2/

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>

<VirtualHost *:443>

    ServerName cloud.kesaco.net
	<IfModule mod_headers.c>
                Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
    </IfModule>

    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/cloud.kesaco.net/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/cloud.kesaco.net/privkey.pem
	
        SSLProxyEngine On
        SSLProxyCheckPeerCN Off
        SSLProxyCheckPeerName Off
        SSLProxyVerify none
        ProxyPreserveHost On
        ProxyPass / https://192.168.22.2/
        ProxyPassReverse / https://192.168.22.2/
        RedirectMatch ^/$ https://192.168.22.2/

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>