# Telegram Timebot reverse proxy snippet (SSL vhost assumed)
# Replace <SECRET> with the same value as WEBHOOK_SECRET.

ProxyPreserveHost On
ProxyPass /telegram/<SECRET>/ http://127.0.0.1:9000/telegram/<SECRET>/ nocanon
ProxyPassReverse /telegram/<SECRET>/ http://127.0.0.1:9000/telegram/<SECRET>/
RequestHeader set X-Forwarded-Proto "https"

# Optional web UI (public or protected with WEB_UI_SECRET)
ProxyPass /timebot/ http://127.0.0.1:9000/web nocanon
ProxyPassReverse /timebot/ http://127.0.0.1:9000/web

# Optional local health check (not exposed publicly)
# ProxyPass /health http://127.0.0.1:9000/health
