pdxwater.org-le-ssl.conf

<IfModule mod_ssl.c>
        <VirtualHost *:443>
                ServerAdmin root@pdxwater.org
                DocumentRoot /var/www/pdxwater.org
                ServerName www.pdxwater.org
                Redirect permanent / https://pdxwater.org
		Include /etc/letsencrypt/options-ssl-apache.conf
		SSLCertificateFile /etc/letsencrypt/live/pdxwater.org/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/pdxwater.org/privkey.pem
</VirtualHost>

<VirtualHost *:443>

		ServerAdmin root@pdxwater.org
		DocumentRoot /var/www/pdxwater.org
		ServerName pdxwater.org

		<Proxy *>
		 Order deny,allow
		 Allow from all
		</Proxy>

		SSLEngine on
		SSLProxyEngine on

		ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined
		
		Include /etc/letsencrypt/options-ssl-apache.conf

		ProxyRequests Off
		ProxyPreserveHost On
		SSLProxyVerify none
		SSLProxyCheckPeerCN off
		SSLProxyCheckPeerExpire off
		ProxyRequests Off
		ProxyPass / http://localhost:3000/
		ProxyPassReverse / http://localhost:3000/

		Timeout 600
		ProxyTimeout 600
		SetEnv proxy-nokeepalive 1
		SetEnv proxy-initial-not-pooled 1

		SSLCertificateFile /etc/letsencrypt/live/pdxwater.org/fullchain.pem
		SSLCertificateKeyFile /etc/letsencrypt/live/pdxwater.org/privkey.pem

	</VirtualHost>
</IfModule>