Elep

<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName syncodoo.dev-techloyce.com
    ServerAlias syncodoo.dev-techloyce.com
    ServerAdmin webmaster@localhost
    DocumentRoot /var/www/html/sync-odoo

# Security Headers
    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
    Header always set X-XSS-Protection "1; mode=block"
    Header always edit Set-Cookie "(?i)^((?:(?!;\s?HttpOnly).)+)$" "$1; HttpOnly"
    Header always edit Set-Cookie "(?i)^((?:(?!;\s?secure).)+)$" "$1; secure"
    Header always set Content-Security-Policy "default-src 'self';"
    Header always set X-Frame-Options "SAMEORIGIN"
    Header always set X-Content-Type-Options "nosniff"
    Header always set Referrer-Policy "same-origin"
    Header always set Permissions-Policy "geolocation=(self 'https://syncodoo.dev-techloyce.com')"

# Proxy Configuration
    ProxyRequests Off
    SSLProxyEngine On
    SSLProxyVerify none
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off
    SSLProxyCheckPeerExpire off
    #Alias / https://y1fdj0jtml.execute-api.us-east-1.amazonaws.com/prod/
    #<Location />
    #   ProxyPass https://y1fdj0jtml.execute-api.us-east-1.amazonaws.com/prod/
    #    ProxyPassReverse https://y1fdj0jtml.execute-api.us-east-1.amazonaws.com/prod/
    #</Location>

# Rewrite Rules
    RewriteEngine On
    RewriteCond %{HTTPS} on
    RewriteCond %{HTTP_COOKIE} !\bSecure\b
    RewriteRule ^/api/export-users - [CO=securecookie:1:%{HTTP_HOST}:443:/;Secure]
    RewriteRule ^/api/login - [CO=securecookie:1:%{HTTP_HOST}:443:/;Secure]
    RewriteRule ^/api/search-projects - [CO=securecookie:1:%{HTTP_HOST}:443:/;Secure]
    RewriteRule ^/auths - [CO=securecookie:1:%{HTTP_HOST}:443:/;Secure]
    RewriteRule ^/monday-callback - [CO=securecookie:1:%{HTTP_HOST}:443:/;Secure]

# Logging
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

# PHP Configuration
    <FilesMatch \.php$>
        SetHandler "proxy:unix:/var/run/php/php7.4-fpm.sock|fcgi://localhost/"
    </FilesMatch>

SSLCertificateFile /etc/letsencrypt/live/syncodoo.dev-techloyce.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/syncodoo.dev-techloyce.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>