Protocols h2 h2c http/1.1

<VirtualHost *:80>
  ServerName domain.com

  RewriteEngine On
  RewriteCond %{SERVER_NAME} =domain.com
  RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

<VirtualHost *:443>
  ServerAdmin email@domain.com
  ServerName domain.com

  ProxyRequests Off
  ProxyPreserveHost On
  ProxyPass / http://127.0.0.1:8443/ upgrade=websocket
  ProxyPassReverse / http://127.0.0.1:8443/

  RewriteEngine On
#  RewriteCond ${HTTP:Upgrade} websocket [NC]
#  RewriteCond ${HTTP:Connection} upgrade [NC]
  RewriteCond %{SERVER_NAME} !=domain.com
#  RewriteRule ^/?(.*) "ws://localhost:4439/$1" [P,L]
  RewriteRule ^ - [F]

  RequestHeader set X-Forwarded-Proto https
  RequestHeader set X-Forwarded-For %{REMOTE_ADDR}s

  Include /etc/letsencrypt/options-ssl-apache.conf
  SSLCertificateFile /etc/letsencrypt/live/domain.com/fullchain.pem
  SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
</VirtualHost>