WSGISocketPrefix /usr/lib/apache2/modules/

<VirtualHost *:443>
    ServerName stats1.zulip.net

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/stats1.zulip.net.crt
    SSLCertificateKeyFile /etc/ssl/certs/stats1.zulip.net.key

    Header add Strict-Transport-Security "max-age=15768000"
    <Location "/">
        AuthType Digest
        AuthName "wiki"
        AuthDigestProvider file
        AuthUserFile /etc/apache2/users/wiki
        Require valid-user
    </Location>

    ErrorLog /var/log/apache2/error.log
    LogLevel warn

    CustomLog /var/log/apache2/access.log combined
    ServerSignature On
    Header add Strict-Transport-Security "max-age=15768000"

    # Graphiti reverse-proxy to unicorn serving at localhost:8088

    ProxyRequests Off
    ProxyPreserveHost On

    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>

    ProxyPass / http://127.0.0.1:8088/
    ProxyPassReverse /grapiti http://127.0.0.1:8088/
</VirtualHost>