<IfModule mod_ssl.c>
<VirtualHost 194.163.173.194:443>
    ServerName n8n.grupolde.com

    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/n8n.grupolde.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/n8n.grupolde.com/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf

    ProxyPreserveHost On
    ProxyRequests Off
    ProxyAddHeaders On

    # Limpia y fija X-Forwarded-* válidos
#    RequestHeader unset X-Forwarded-For
    RequestHeader set   X-Forwarded-For expr=%{REMOTE_ADDR}
    RequestHeader set   X-Forwarded-Proto "https"
#    RequestHeader set   X-Forwarded-Port  "443"

    # 🔌 WebSocket de push (¡antes que el '/')
    ProxyPass        /rest/push ws://127.0.0.1:5678/rest/push
    ProxyPassReverse /rest/push ws://127.0.0.1:5678/rest/push

    # (opcional) Webhooks WS si los usas
    ProxyPass        /webhook/ ws://127.0.0.1:5678/webhook/
    ProxyPassReverse /webhook/ ws://127.0.0.1:5678/webhook/

    # 🌐 HTTP normal
    ProxyPass        / http://127.0.0.1:5678/ retry=0 timeout=300 Keepalive=On
    ProxyPassReverse / http://127.0.0.1:5678/

    ProxyTimeout 600
</VirtualHost>
</IfModule>