Skip to content

Instantly share code, notes, and snippets.

@trasherdk
Forked from ehelms/gist:9393587
Last active October 28, 2021 04:36
Show Gist options
  • Save trasherdk/8743d1a773cd43798d8933123c6738f9 to your computer and use it in GitHub Desktop.
Save trasherdk/8743d1a773cd43798d8933123c6738f9 to your computer and use it in GitHub Desktop.
<VirtualHost *:443>
ServerName centos.installer
DocumentRoot "/var/www"
## Directories, there should at least be a declaration for /var/www
<Directory "/var/www">
Options SymLinksIfOwnerMatch
AllowOverride None
Order allow,deny
Allow from all
</Directory>
## Logging
ErrorLog "/var/log/httpd/katello-ssl_error_ssl.log"
ServerSignature Off
CustomLog "/var/log/httpd/katello-ssl_access_ssl.log" combined
## Server aliases
ServerAlias katello
## SSL directives
SSLEngine on
SSLCertificateFile "/etc/pki/katello/certs/katello-ca.crt"
SSLCertificateKeyFile "/etc/pki/katello/private/katello-ca.key"
SSLCACertificatePath "/etc/pki/tls/certs"
SSLCACertificateFile "/etc/pki/katello/certs/katello-ca.crt"
SSLVerifyClient optional
SSLVerifyDepth 3
SSLOptions +StdEnvVars
Alias /pub /var/www/html/pub
<Location /pub>
Options +FollowSymLinks +Indexes
</Location>
<Location /subscription>
RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
SSLVerifyClient optional
SSLRenegBufferSize 16777216
SSLVerifyDepth 2
</Location>
SSLOptions +StdEnvVars +ExportCertData +FakeBasicAuth
RewriteEngine On
ProxyPass / http://localhost:3000/
ProxyPassReverse / http://localhost:3000/
RewriteRule ^/$ http://localhost:3000/$1 [P,L]
</VirtualHost>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment