Add the right module

roles/gitea/tasks/main.yml

@@ -21,6 +21,12 @@
             login_password: "{{ mysql_root_password }}"
     - name: Set up Apache
       block:
+        - name: Enable modules
+          command:
+            cmd: a2enmod "{{ item }}"
+            creates: "/etc/apache2/mods-enabled/{{ item }}.load"
+          loop:
+            - proxy
         - name: Template out vhost
           template:
             src: "apache2-vhost-ssl.conf"

roles/gitea/templates/apache2-vhost-ssl.conf

@@ -21,7 +21,8 @@ SSLStrictSNIVHostCheck off
 		AllowOverride All
 		Options MultiViews FollowSymlinks
 	</Directory>
-	ProxyRequests off
+	ProxyPreserveHost On
+	ProxyRequests Off
 	ProxyPass / https://127.0.0.1:3000/ nocanon
 	ProxyPassReverse / https://127.0.0.1:3000/