PassengerStatThrottleRate 120
RailsAutoDetect On

<VirtualHost  10.92.164.84:80>
        ServerName dashboard.internal.net
        DocumentRoot /usr/share/puppet-dashboard/public/
        <Directory /usr/share/puppet-dashboard/public/>
                Options None
                Order allow,deny
                allow from all
        </Directory>
  ErrorLog /var/log/httpd/dashboard_error.log
  LogLevel warn
  CustomLog /var/log/httpd/dashboard_access.log combined
  ServerSignature On
</VirtualHost>

<VirtualHost  10.92.164.84:443>
        SSLEngine on
        SSLProtocol -ALL +SSLv3 +TLSv1
        SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

        SSLCertificateFile        /usr/share/puppet-dashboard/certs/dashboard.cert.pem
        SSLCertificateKeyFile     /usr/share/puppet-dashboard/certs/dashboard.private_key.pem
        SSLCACertificateFile      /usr/share/puppet-dashboard/certs/dashboard.ca_cert.pem

        # If Apache complains about invalid signatures on the CRL, you can try disabling
        # CRL checking by commenting the next line, but this is not recommended.
        #SSLCARevocationFile       /usr/share/puppet-dashboard/certs/dashboard.ca_crl.pem

        SSLVerifyClient optional
        SSLVerifyDepth  1
        SSLOptions +StdEnvVars

        ServerName dashboard.internal.net
        DocumentRoot /usr/share/puppet-dashboard/public

        <Directory   /usr/share/puppet-dashboard/public>
                Options None
                AllowOverride None
                #Order allow,deny
                #Allow from all
        </Directory>

        <Location /reports/upload>
                <Limit POST>
                        # Configuration restricts HTTP actions to POST only
                        Order allow,deny
                        # explicitly permit our Puppet Masters
                        Allow from localhost
                        Allow from ...
                        Satisfy any
                </Limit>
        </Location>

        # For node definitions from masters.
        <Location /nodes>
                <Limit GET>
                        # Configuration restricts HTTP actions to GET only
                        Order allow,deny
                        # explicitly permit our Puppet Masters
                        Allow from localhost
                        Allow from ...
                        Satisfy any
                </Limit>
        </Location>

        <Location / >
                Order deny,allow
                # explictly permit our Puppet Masters
                Allow from ...
                Satisfy any
                AuthType Basic
                AuthName "Puppet Dashboard"
                AuthBasicAuthoritative Off
                AuthBasicProvider ldap
                AuthLDAPBindDN "..."
                AuthLDAPBindPassword password
                AuthLDAPURL "..."
                Require ldap-attribute gidNumber=123

                # Enable this to require client-side certificates for Dashboard connections
                #SSLVerifyClient require
        </Location>
</VirtualHost>