Reverse SSL proxy apache config

osto.us-yxorp-ssl.conf

<IfModule mod_ssl.c>
    <VirtualHost *:443>
        ServerName osto.us
        ServerAlias osto.us

        <Proxy *>
        Order deny,allow
            Allow from all
        </Proxy>

        <Location />
            AuthType Basic
            AuthName "u wot m8?"
            AuthUserFile /etc/apache2/.htpasswd
            Require valid-user
            Order deny,allow
            Allow from all
        </Location>

        <Location /ping>
            Satisfy Any
            Allow from all
        </Location>

        SSLEngine on
        SSLProxyEngine On
        RewriteEngine On

        SSLCertificateFile /etc/letsencrypt/live/osto.us/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/osto.us/privkey.pem
        Include /etc/letsencrypt/options-ssl-apache.conf
  
        ProxyRequests Off
        ProxyPreserveHost On
  
        # Transmission
        ProxyPass /transmission http://127.0.0.1:9091/transmission
        ProxyPassReverse /transmission http://127.0.0.1:9091/transmission
  
        #PlexPy
        ProxyPass /plexpy http://127.0.0.1:8181/plexpy
        ProxyPassReverse /plexpy http://127.0.0.1:8181/plexpy

        #Sonarr
        ProxyPass /sonarr http://127.0.0.1:8989/sonarr
        ProxyPassReverse /sonarr http://127.0.0.1:8989/sonarr

        #Radarr
        ProxyPass /radarr http://127.0.0.1:7878/radarr
        ProxyPassReverse /radarr http://127.0.0.1:7878/radarr

        #netdata
        ProxyPass /netdata http://127.0.0.1:19999/
        ProxyPassReverse /netdata http://127.0.0.1:19999/
        RewriteRule ^/netdata$ https://%{HTTP_HOST}/netdata/ [L,R=301]

    </VirtualHost>
</IfModule>
<IfModule mod_headers.c>
    Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
</IfModule>