~mathiaz/+junk/uec-ec2-puppet-config-passenger

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
<VirtualHost *:8140>

        SSLEngine on
        SSLProtocol -ALL +SSLv3 +TLSv1
        SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

        SSLCertificateFile      /var/lib/puppet/ssl/certs/<%= fqdn %>.pem
        SSLCertificateKeyFile   /var/lib/puppet/ssl/private_keys/<%= fqdn %>.pem
        SSLCertificateChainFile /var/lib/puppet/ssl/certs/ca.pem
        SSLCACertificateFile    /var/lib/puppet/ssl/certs/ca.pem
        SSLCARevocationFile     /var/lib/puppet/ssl/crl.pem
        SSLVerifyDepth  1
        SSLOptions +StdEnvVars
        SSLVerifyClient optional

        PassengerHighPerformance on
        PassengerStatThrottleRate 120
        RackAutoDetect Off
        RackBaseURI /
        RailsAutoDetect Off

        DocumentRoot /etc/puppet/rack/public/
        <Directory /etc/puppet/rack/>
                Options None
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>
</VirtualHost>