<VirtualHost *:80>
        ServerName host1.domain.com
        ServerAdmin admin@domain.com

        ErrorLog /var/log/apache2/host1-proxy.error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn

        CustomLog /var/log/apache2/host1-proxy.access.log combined
        ServerSignature On

        Alias /icons/ "/usr/share/apache2/icons/"

        RewriteEngine On
#       RewriteRule ^/([^/]*)$ /public/$1 [R]
        RewriteRule ^(.*)  /public/$1 [L]

        <Location />
                # allow access only if they authenticate with PAM
                AuthType basic
                AuthName "External access"
                require group dusers

                Order allow,deny
                # or if they're on local network
                #Allow from 10.10.10.0/24

                Satisfy any
        </Location>

        <Location /public>
                Allow from all
                Order allow,deny
                Satisfy any
        </Location>

        ProxyPreserveHost On
        ProxyPass / http://hydrogen.office.mwater.ca/

</VirtualHost>
~