NameVirtualHost *:443
<VirtualHost office.mydomain.com:443>
  ServerName office.mydomain.com

  # SSL configuration, you may want to take the easy route instead and use Lets Encrypt!
  SSLEngine on
  SSLCertificateFile    /etc/letsencrypt/live/mydomain.com/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/mydomain.com/privkey.pem
  SSLProtocol             all -SSLv2 -SSLv3


SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-$
SSLHonorCipherOrder on

  # Encoded slashes need to be allowed
  AllowEncodedSlashes NoDecode

  # Container uses a unique non-signed certificate
  SSLProxyEngine On
  SSLProxyVerify None
  SSLProxyCheckPeerCN Off
  SSLProxyCheckPeerName Off

  # keep the host
  ProxyPreserveHost On

  # static html, js, images, etc. served from loolwsd
  # loleaflet is the client part of LibreOffice Online
  ProxyPass           /loleaflet https://office.mydomain.com:9980/loleaflet retry=0
  ProxyPassReverse    /loleaflet https://office.mydomain.com:9980/loleaflet

  # WOPI discovery URL
  ProxyPass           /hosting/discovery https://office.mydomain.com:9980/hosting/discovery retry=0
  ProxyPassReverse    /hosting/discovery https://office.mydomain.com:9980/hosting/discovery

  # Main websocket
  ProxyPassMatch "/lool/(.*)/ws$" ws://office.mydomain.com:9980/lool/$1/ws nocanon

  # Admin Console websocket
  ProxyPass   /lool/adminws ws://office.mydomain.com:9980/lool/adminws

  # Download as, Fullscreen presentation and Image upload operations
  ProxyPass           /lool https://office.mydomain.com:9980/lool
  ProxyPassReverse    /lool https://office.mydomain.com:9980/lool
</VirtualHost>