<IfModule mod_ssl.c>
   <VirtualHost *:443>
        ServerAdmin webmaster@agent-tracker.prophog2.com
        ServerName agent-tracker.prophog2.com
        ServerAlias agent-access.backofficetracker.com
        ErrorLog /etc/apache2/logs/agent-tracker-error.log
        CustomLog /etc/apache2/logs/agent-tracker-access.log combined

        Include /etc/letsencrypt/options-ssl-apache.conf
        SSLCertificateFile /etc/letsencrypt/live/agent-tracker.prophog2.com/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/agent-tracker.prophog2.com/privkey.pem

        # Same app lives at login.backofficetracker.com — no PropHog host in the browser.
        RewriteEngine On
        RewriteRule ^(.*)$ https://login.backofficetracker.com$1 [R=301,L,NE,QSA]
</VirtualHost>
</IfModule>