httpd-ssl.conf

SSLRandomSeed startup file:/dev/urandom 512
SSLRandomSeed connect file:/dev/urandom 512

#SSLSessionCache       "xxx"
SSLSessionCache        "xxx"
SSLSessionCacheTimeout 300

SSLMutex  "xxx"

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin
SSLCipherSuite xxx

SSLCertificateFile "xxx"
SSLCertificateKeyFile "xxx"
SSLCertificateChainFile "xxx"

<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>

BrowserMatch ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

httpd-vhosts.conf

# =============================================================================
# Live non-SSL service
# =============================================================================

NameVirtualHost *:8080

<VirtualHost *:8080>
  Include conf/rails/live_vhost_common.conf
</VirtualHost>

# =============================================================================
# Live SSL service
# =============================================================================

NameVirtualHost *:8443

<VirtualHost *:8443>
  Include conf/rails/live_vhost_common.conf
  SSLEngine on
  CustomLog "xxx"
</VirtualHost>

# etc. for the unusual port services

httpd.conf

ServerRoot "/xxx/local/apache2"

Listen xxx:8080
Listen xxx:8443
# ...and others for development services on unusual ports

LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_dbd_module modules/mod_authn_dbd.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule dbd_module modules/mod_dbd.so
LoadModule dumpio_module modules/mod_dumpio.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule include_module modules/mod_include.so
LoadModule filter_module modules/mod_filter.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule env_module modules/mod_env.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule expires_module modules/mod_expires.so
LoadModule headers_module modules/mod_headers.so
LoadModule ident_module modules/mod_ident.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule version_module modules/mod_version.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule mime_module modules/mod_mime.so
LoadModule dav_module modules/mod_dav.so
LoadModule status_module modules/mod_status.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule asis_module modules/mod_asis.so
LoadModule info_module modules/mod_info.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule dav_fs_module modules/mod_dav_fs.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule dir_module modules/mod_dir.so
LoadModule imagemap_module modules/mod_imagemap.so
LoadModule actions_module modules/mod_actions.so
LoadModule speling_module modules/mod_speling.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule alias_module modules/mod_alias.so
LoadModule rewrite_module modules/mod_rewrite.so

LoadModule passenger_module /xxx/ruby_ee/lib/ruby/gems/1.8/gems/passenger-2.2.11/ext/apache2/mod_passenger.so
PassengerRoot /xxx/ruby_ee/lib/ruby/gems/1.8/gems/passenger-2.2.11
PassengerRuby /xxx/ruby_ee/bin/ruby

<IfModule !mpm_netware_module>
<IfModule !mpm_winnt_module>

User daemon
Group daemon

</IfModule>
</IfModule>

ServerAdmin ahodgkin@rowing.org.uk

<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>

<FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy All
</FilesMatch>

ErrorLog "logs/error_log"
LogLevel warn

<IfModule log_config_module>
    # Unchanged from default installation of httpd.conf
</IfModule>

DefaultType text/plain

<IfModule mime_module>
    TypesConfig conf/mime.types
    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz
</IfModule>

MIMEMagicFile conf/magic

Include conf/extra/httpd-vhosts.conf
Include conf/extra/httpd-ssl.conf

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

live_vhost_common.conf

# Configuration fragment for LIVE services.
#
# Include this inside a VirtualHost container for the required port,
# then add any port-specific variations externally (e.g. for SSL).

ServerName www.xxx.com
ServerAdmin ahodgkin@rowing.org.uk

ErrorLog  "logs/rails-live-error_log"
CustomLog "logs/rails-live-access_log" common

DocumentRoot /xxx/public
<Directory   /xxx/public>
  AllowOverride all
  Options -MultiViews
</Directory>

SetEnv GEM_PATH="custom - this isn't getting through"
SetEnv GEM_HOME="as above"
SetEnv RUBYLIB="as above"

RailsEnv production