diaspora.conf

<VirtualHost *:80>
  ServerName diaspora.example.org
  RedirectPermanent / https://diaspora.example.org/
</VirtualHost>
<VirtualHost *:443>
 ServerName diaspora.example.org
 
 DocumentRoot /path/to/diaspora/public

 RewriteEngine On

 RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
 RewriteRule ^/(.*)$ balancer://upstream%{REQUEST_URI} [P,QSA,L]

 <Proxy balancer://upstream>
  BalancerMember http://127.0.0.1:3000
 </Proxy>

 ProxyRequests Off
 ProxyVia On  
 ProxyPreserveHost On
 RequestHeader set X_FORWARDED_PROTO https

 <Proxy *>
  Order allow,deny
  Allow from all
 </Proxy>

 <Directory /path/to/diaspora/public>
  Allow from all
  AllowOverride all
  Options -MultiViews
 </Directory>

 SSLEngine On
 SSLCertificateFile /path/to/cert
 SSLCertificateKeyFile /path/to/private_key
 
 # maybe not needed, need for example for startssl to point to a local
 # copy of http://www.startssl.com/certs/sub.class1.server.ca.pem
 SSLCertificateChainFile /path/to/chain_file 
</VirtualHost>