anchor.diff:  <% @proxy_allow_from.each do |host| -%>
       Allow from <%= host %>
   <% end -%>
  -    Deny from all
     </Proxy>
   
     ProxyVia On
  
positive.code: LoadModule ssl_module modules/mod_ssl.so
  
  Listen <%= puppet_passenger_port %>
  
  <VirtualHost *:<%= puppet_passenger_port %>>
  
negative.code:   SSLVerifyClient         optional
    SSLVerifyDepth          1
    SSLOptions              +StdEnvVars
  
  
    RequestHeader unset X-Forwarded-For
  
    RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
  