1. Módulos necesarios pra correr el back con https

sudo a2enmod proxy proxy_http proxy_wstunnel ssl headers rewrite
sudo systemctl reload apache2

<VirtualHost *:443>
    ServerName desarrollo.aktis.com.ar

    # Usá las rutas reales de tu certificado actual
    SSLEngine on
    SSLCertificateFile      /etc/letsencrypt/live/desarrollo.aktis.com.ar/fullchain.pem
    SSLCertificateKeyFile   /etc/letsencrypt/live/desarrollo.aktis.com.ar/privkey.pem
    # Si tenés chain separado:
    # SSLCertificateChainFile /etc/letsencrypt/live/desarrollo.aktis.com.ar/chain.pem

    ProxyPreserveHost On
    RequestHeader set X-Forwarded-Proto "https"
    RequestHeader set X-Forwarded-Port "443"

    # WebSocket (conversación en tiempo real)
    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteRule ^/ws/(.*)$  ws://127.0.0.1:8005/ws/$1 [P,L]

    # REST + static + docs + health
    ProxyPass        /  http://127.0.0.1:8005/
    ProxyPassReverse /  http://127.0.0.1:8005/

    # Timeouts largos para audio / STT / TTS
    ProxyTimeout 3600

    ErrorLog  ${APACHE_LOG_DIR}/bottle-ai-error.log
    CustomLog ${APACHE_LOG_DIR}/bottle-ai-access.log combined
</VirtualHost>

# Opcional: forzar HTTP → HTTPS
<VirtualHost *:80>
    ServerName desarrollo.aktis.com.ar
    Redirect permanent / https://desarrollo.aktis.com.ar/
</VirtualHost>

git pull origin develop