# /etc/apache2/sites-available/yourpart-websocket.conf
<IfModule mod_ssl.c>
<VirtualHost *:4551>
    ServerName www.your-part.de
    
    # SSL aktivieren
    SSLEngine on
    Protocols http/1.1
    
    # SSL-Konfiguration
    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /etc/letsencrypt/live/www.your-part.de/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/www.your-part.de/privkey.pem
    
    # Proxy-Einstellungen
    ProxyPreserveHost On
    ProxyRequests Off
    AllowEncodedSlashes NoDecode
    
    # WebSocket-Upgrade (muss VOR ProxyPass stehen)
    # Apache lauscht auf Port 4551 (extern, verschlüsselt) und leitet an Daemon auf Port 4551 weiter (intern, unverschlüsselt)
    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} websocket [NC]
    RewriteCond %{HTTP:Connection} upgrade [NC]
    RewriteRule ^/?(.*) "ws://localhost:4551/$1" [P,L]
    
    # Fallback für normale HTTP-Requests (falls nötig)
    ProxyPass / http://localhost:4551/
    ProxyPassReverse / http://localhost:4551/
    
    # CORS-Headers
    Header always set Access-Control-Allow-Origin "https://www.your-part.de"
    Header always set Access-Control-Allow-Methods "GET, POST, OPTIONS"
    Header always set Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept, Authorization"
    
    ErrorLog /var/log/apache2/yourpart-websocket.error.log
    CustomLog /var/log/apache2/yourpart-websocket.access.log combined
</VirtualHost>
</IfModule>