apache

<VirtualHost *:80>
        ServerAdmin webmaster@localhost
        ServerName diaspora.com.ar
        ServerAlias www.diaspora.com.ar

        RedirectPermanent / https://diaspora.com.ar/
</VirtualHost>

<VirtualHost *:443>
        ServerName diaspora.com.ar
        ServerAlias www.diaspora.com.ar

        DocumentRoot /home/diaspora/diaspora/public/

        RewriteEngine On

        RewriteCond %{HTTP_HOST} !^diaspora\.com\.ar [NC]
        RewriteRule ^/(.*)$ https://diaspora\.com\.ar/$1 [L,R,QSA]

        RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
        RewriteRule ^/(.*)$ balancer://upstream%{REQUEST_URI} [P,QSA,L]

        # New for vines
        RewriteCond %{REQUEST_URI} ^/http-bind
        RewriteRule ^/(http\-bind.*)$ balancer://chat%{REQUEST_URI} [P,QSA,L]

        RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
        RewriteRule ^/(.*)$ balancer://diaspora%{REQUEST_URI} [P,QSA,L]



<Proxy balancer://upstream>
        BalancerMember http://127.0.0.1:3000
</Proxy>

        ProxyRequests Off
        ProxyVia On
        ProxyPreserveHost On
        RequestHeader set X_FORWARDED_PROTO https

<Proxy *>

# Apache < 2.4
        Order allow,deny
        Allow from all
        # Apache >= 2.4
        #Require all granted
</Proxy>

<Directory /home/diaspora/diaspora/public>
        Options -MultiViews
        # Apache < 2.4
        Allow from all
        AllowOverride all
        # Apache >= 2.4
        #Require all granted
</Directory>

SSLEngine On
SSLCertificateFile /home/diaspora/diaspora/certs/ssl.crt
SSLCertificateKeyFile /home/diaspora/diaspora/certs/ssl-no-pass.key
# maybe not needed, need for example for startssl to point to a local
# copy of https://www.startssl.com/certs/class1/sha2/pem/sub.class1.server.sha2.ca.pem
SSLCertificateChainFile /home/diaspora/diaspora/certs/sub.class1.server.sha2.ca.pem


# Based on https://wiki.mozilla.org/Security/Server_Side_TLS - consider as global configuration
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-$
SSLHonorCipherOrder on
SSLCompression off
#</VirtualHost>

#RewriteEngine On

#RewriteCond %{REQUEST_URI} ^/http-bind
#RewriteRule ^/(http\-bind.*)$ balancer://chat%{REQUEST_URI} [P,QSA,L]

#RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
#RewriteRule ^/(.*)$ balancer://diaspora%{REQUEST_URI} [P,QSA,L]

<Proxy balancer://diaspora>
  BalancerMember http://127.0.0.1:3000
</Proxy>

<Proxy balancer://chat>
  BalancerMember http://0.0.0.0:5280
</Proxy>

</VirtualHost>