ssl Options for foreman

diff --git a/customer/pixelpark/foreman01.pixelpark.com.yaml b/customer/pixelpark/foreman01.pixelpark.com.yaml
index c857ed5bb527b6f1d4e68ff88f30ea47d5d831af..29735e42c8cda80b3fb0c7a9957237d35e21a61a 100644 (file)
--- a/customer/pixelpark/foreman01.pixelpark.com.yaml
+++ b/customer/pixelpark/foreman01.pixelpark.com.yaml
@@ -24,5 +24,9 @@ site::profile::apache::pp_vhosts:
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.com-key.pem'
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.com-cert.pem'
+    ssl_ca: '/var/lib/puppet/ssl/certs/ca.pem'
+    ssl_verify_client: optional
+    ssl_options:
+      - '+StdEnvVars'
     passenger_app_root: '/usr/share/foreman'
     redirect_dest_non_ssl: https://foreman.pixelpark.com/