## mark a section (Learn more)

NameVirtualHost *:8140 <Proxy balancer://puppetmaster> BalancerMember http://127.0.0.1:18140 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18141 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18142 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18143 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18144 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18145 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18146 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18147 loadfactor=10 smax=5 max=100 ttl=30 retry=10 BalancerMember http://127.0.0.1:18148 loadfactor=10 smax=5 max=100 ttl=30 retry=10 ProxySet lbmethod=byrequests maxattempts=3 nofailover=Off </Proxy> <VirtualHost *:8140> SSLEngine on SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA SSLCertificateFile /etc/puppet/ssl/certs/puppet.joostas.com.pem SSLCertificateKeyFile /etc/puppet/ssl/private_keys/puppet.joostas.com.pem SSLCertificateChainFile /etc/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /etc/puppet/ssl/ca/ca_crt.pem SSLCARevocationFile /etc/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e <Location /> SetHandler balancer-manager Order deny,allow Deny from all Allow from x.x.x.x/32 </Location> ProxyPass / balancer://puppetmaster:8140/ ProxyPassReverse / balancer://puppetmaster:8140/ ProxyPreserveHost on CustomLog "|/usr/sbin/rotatelogs /srv/log/apache2/puppet-access-%Y%m%d.access.log 86400" joost-ssl </VirtualHost>

This paste will be private.