Trouble getting started behind a reverse proxy about loomio-deploy HOT 7 CLOSED

ports:
   - 127.0.0.1:5000:5000

map $http_upgrade $connection_upgrade {
  default upgrade;
  '' close;
}


upstream loombackend {
    server 127.0.0.1:3001 fail_timeout=0;
}

upstream loomchannels {
    server 127.0.0.1:5000 fail_timeout=0;
}

server {
    listen 80;
    listen [::]:80;
    server_name loomio.example.com;
    location / { return 301 https://$host$request_uri; }
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name loomio.example.com;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_tickets off;
    ssl_certificate     /etc/letsencrypt/live/loomio.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/loomio.example.com/privkey.pem;
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    client_max_body_size 200m;


location / {
try_files $uri @proxy;
}


location @proxy {
proxy_pass http://loombackend;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass_header Server;
proxy_buffering off;
proxy_redirect off;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;


if ($http_origin ~* (https?://(?:.+\.)?(loomio\.example\.com|files\.example\.com|channels\.loomio\.example\.com)$)) {
add_header 'Access-Control-Allow-Origin' '$http_origin';
}
add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization';
add_header 'Access-Control-Expose-Headers' 'Content-Length';
add_header 'Access-Control-Expose-Headers' 'X-Amz-SignedHeaders';
add_header 'Access-Control-Expose-Headers' 'X-Requested-With';
add_header 'Access-Control-Expose-Headers' 'Content-Type';
add_header 'Access-Control-Expose-Headers' 'Accept';
add_header 'Access-Control-Expose-Headers' 'Origin';
add_header 'Access-Control-Expose-Headers' 'Authorization';
add_header 'Access-Control-Allow-Credentials' 'true';

tcp_nodelay on;
}

location /socket.io {
    proxy_pass http://loomchannels;
    proxy_buffering off;
    proxy_set_header Host $host;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    if ($http_origin ~* (https?://(?:.+\.)?(loomio\.example\.com|files\.example\.com|channels\.loomio\.example\.com)$)) {
add_header 'Access-Control-Allow-Origin' '$http_origin';
}
add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization';
add_header 'Access-Control-Expose-Headers' 'Content-Length';
add_header 'Access-Control-Expose-Headers' 'X-Amz-SignedHeaders';
add_header 'Access-Control-Expose-Headers' 'X-Requested-With';
add_header 'Access-Control-Expose-Headers' 'Content-Type';
add_header 'Access-Control-Expose-Headers' 'Accept';
add_header 'Access-Control-Expose-Headers' 'Origin';
add_header 'Access-Control-Expose-Headers' 'Authorization';
add_header 'Access-Control-Allow-Credentials' 'true';

tcp_nodelay on;
}
}

# Load required modules
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule headers_module modules/mod_headers.so
LoadModule rewrite_module modules/mod_rewrite.so

# HTTP Server Redirect to HTTPS
<VirtualHost *:80>
    ServerName loomio.example.com
    RewriteEngine On
    RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R=301,L]
</VirtualHost>

# HTTPS VirtualHost
<VirtualHost *:443>
    ServerName loomio.example.com

    # SSL Configuration
    SSLEngine on
    SSLCertificateFile "/etc/letsencrypt/live/loomio.example.com/fullchain.pem"
    SSLCertificateKeyFile "/etc/letsencrypt/live/loomio.example.com/privkey.pem"
    SSLProtocol TLSv1.2 TLSv1.3
    SSLCipherSuite HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA
    SSLHonorCipherOrder on
    SSLSessionTickets Off

    # Proxy settings
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyPass /socket.io http://127.0.0.1:5000/socket.io
    ProxyPassReverse /socket.io http://127.0.0.1:5000/socket.io
    ProxyPass / http://127.0.0.1:3001/
    ProxyPassReverse / http://127.0.0.1:3001/

    # WebSocket upgrade headers
    RewriteEngine on
    RewriteCond %{HTTP:Upgrade} websocket [NC]
    RewriteCond %{HTTP:Connection} upgrade [NC]
    RewriteRule .* "ws://127.0.0.1:5000/$1" [P,L]

    # CORS Headers for specific domains
    Header always set Access-Control-Allow-Origin "https://loomio.example.com"
    Header always set Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS"
    Header always set Access-Control-Allow-Headers "Content-Type, Authorization"
    Header always set Access-Control-Allow-Credentials "true"

    <Directory "/path/to/app">
        AllowOverride All
        Require all granted
    </Directory>

    # Logging
    ErrorLog ${APACHE_LOG_DIR}/loomio_error.log
    CustomLog ${APACHE_LOG_DIR}/loomio_access.log combined
</VirtualHost>