Apache configuration

sudo a2ensite app-your-domain.conf
sudo a2ensite api-your-domain.conf
sudo systemctl reload apache2

sudo a2enmod proxy proxy_http proxy_wstunnel ssl rewrite headers
sudo systemctl restart apache2

<VirtualHost *:80>
    ServerName app.your-domain.com
    Redirect permanent / https://app.your-domain.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName app.your-domain.com
    DocumentRoot /var/www/your-app/client/build

    # SSL directives added by Certbot, or configure manually:
    # SSLEngine on
    # SSLCertificateFile /etc/letsencrypt/live/app.your-domain.com/fullchain.pem
    # SSLCertificateKeyFile /etc/letsencrypt/live/app.your-domain.com/privkey.pem

    <Directory /var/www/your-app/client/build>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted

        RewriteEngine On
        RewriteBase /
        RewriteRule ^index\.html$ - [L]
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule . /index.html [L]
    </Directory>

    ErrorLog ${APACHE_LOG_DIR}/app-error.log
    CustomLog ${APACHE_LOG_DIR}/app-access.log combined
</VirtualHost>

<VirtualHost *:80>
    ServerName api.your-domain.com
    Redirect permanent / https://api.your-domain.com/
</VirtualHost>

<VirtualHost *:443>
    ServerName api.your-domain.com

    ProxyPreserveHost On
    ProxyRequests Off

    # REST API
    ProxyPass /api/ http://127.0.0.1:5000/api/
    ProxyPassReverse /api/ http://127.0.0.1:5000/api/

    # Socket.io WebSocket upgrade
    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteRule /(.*) ws://127.0.0.1:5000/$1 [P,L]

    # Remaining traffic (Socket.io polling, Zerodha callback paths, etc.)
    ProxyPass / http://127.0.0.1:5000/
    ProxyPassReverse / http://127.0.0.1:5000/

    ErrorLog ${APACHE_LOG_DIR}/api-error.log
    CustomLog ${APACHE_LOG_DIR}/api-access.log combined
</VirtualHost>

sudo apache2ctl configtest
sudo systemctl reload apache2

VITE_APP_BASEURL=https://api.your-domain.com/api/
VITE_APP_SOCKET_URL=https://api.your-domain.com
PUBLIC_URL=https://app.your-domain.com/
GENERATE_SOURCEMAP=false

cd /path/to/nifty_fifty_bank_nifty_ReactJS
yarn install
yarn build

sudo rsync -av --delete build/ /var/www/your-app/client/build/
sudo systemctl reload apache2