| 1 |
PidFile /var/run/apache2-puppetmaster.pid |
|---|
| 2 |
|
|---|
| 3 |
# Include module configuration: |
|---|
| 4 |
Include /etc/apache2/mods-enabled/*.load |
|---|
| 5 |
Include /etc/apache2/mods-enabled/*.conf |
|---|
| 6 |
|
|---|
| 7 |
TypesConfig /etc/mime.types |
|---|
| 8 |
|
|---|
| 9 |
User www-data |
|---|
| 10 |
Group www-data |
|---|
| 11 |
|
|---|
| 12 |
ErrorLog /var/log/apache2/puppetmaster-error.log |
|---|
| 13 |
|
|---|
| 14 |
Listen 8140 |
|---|
| 15 |
|
|---|
| 16 |
ProxyRequests Off |
|---|
| 17 |
|
|---|
| 18 |
<Proxy balancer://puppetmaster> |
|---|
| 19 |
BalancerMember http://127.0.0.1:18140 |
|---|
| 20 |
BalancerMember http://127.0.0.1:18141 |
|---|
| 21 |
BalancerMember http://127.0.0.1:18142 |
|---|
| 22 |
BalancerMember http://127.0.0.1:18143 |
|---|
| 23 |
BalancerMember http://127.0.0.1:18144 |
|---|
| 24 |
BalancerMember http://127.0.0.1:18145 |
|---|
| 25 |
BalancerMember http://127.0.0.1:18146 |
|---|
| 26 |
BalancerMember http://127.0.0.1:18147 |
|---|
| 27 |
BalancerMember http://127.0.0.1:18148 |
|---|
| 28 |
BalancerMember http://127.0.0.1:18149 |
|---|
| 29 |
</Proxy> |
|---|
| 30 |
|
|---|
| 31 |
<VirtualHost *:8140> |
|---|
| 32 |
SSLEngine on |
|---|
| 33 |
SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA |
|---|
| 34 |
SSLCertificateFile /var/lib/puppet/ssl/certs/<%= certname %>.pem |
|---|
| 35 |
SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/<%= certname %>.pem |
|---|
| 36 |
SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem |
|---|
| 37 |
SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem |
|---|
| 38 |
SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem |
|---|
| 39 |
SSLVerifyClient optional |
|---|
| 40 |
SSLVerifyDepth 1 |
|---|
| 41 |
SSLOptions +StdEnvVars |
|---|
| 42 |
|
|---|
| 43 |
RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e |
|---|
| 44 |
RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e |
|---|
| 45 |
|
|---|
| 46 |
<Location /> |
|---|
| 47 |
SetHandler balancer-manager |
|---|
| 48 |
Order allow,deny |
|---|
| 49 |
Allow from all |
|---|
| 50 |
</Location> |
|---|
| 51 |
|
|---|
| 52 |
ProxyPass / balancer://puppetmaster:8140/ |
|---|
| 53 |
ProxyPassReverse / balancer://puppetmaster:8140/ |
|---|
| 54 |
ProxyPreserveHost on |
|---|
| 55 |
|
|---|
| 56 |
CustomLog "|/usr/bin/cronolog /var/log/apache/<%= certname %>-access-%Y-%m-%d.log" combined |
|---|
| 57 |
ErrorLog "|/usr/bin/cronolog /var/log/apache/<%= certname %>-error-%Y-%m-%d.log" |
|---|
| 58 |
|
|---|
| 59 |
</VirtualHost> |
|---|
