#SSLRandomSeed startup file:/dev/random  512
#SSLRandomSeed startup file:/dev/urandom 512
#SSLRandomSeed connect file:/dev/random  512
#SSLRandomSeed connect file:/dev/urandom 512

Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin
SSLSessionCache        shmcb:/usr/local/apache2/logs/ssl_scache(512000)
SSLSessionCacheTimeout  300

SSLMutex  file:/usr/local/apache2/logs/ssl_mutex

##
## SSL Virtual Host Context
##

<VirtualHost *:443>
    ServerAdmin bob@sporkmonger.com
    ServerName junkyardlist.com:443
    DocumentRoot /var/www/junkyardlist.com/current/public
    ErrorLog /var/log/apache2/ssl_junkyardlist_com_error.log
    CustomLog /var/log/apache2/ssl_junkyardlist_com_access.log combined

    <Directory /var/www/junkyardlist.com/current/public>
        Options FollowSymLinks
        AllowOverride None
        Order allow,deny
        Allow from all
    </Directory>

    RequestHeader set X_FORWARDED_PROTO 'https'

    ProxyPass /images !
    ProxyPass /stylesheets !
    ProxyPass /javascripts !
    ProxyPass /favicon.ico !
    ProxyPass / balancer://junkyardlist_com_cluster
#    ProxyPassReverse / balancer://junkyardlist_com_cluster
    ProxyPreserveHost On

    <Proxy balancer://junkyardlist_com_cluster>
        BalancerMember http://127.0.0.1:7000
        BalancerMember http://127.0.0.1:7001
        BalancerMember http://127.0.0.1:7002
    </Proxy>

    SSLEngine on

    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCertificateFile /usr/local/apache2/conf/ssl.crt/junkyardlist.com.crt
    SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/junkyardlist.com.key

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
        SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory "/usr/local/apache2/cgi-bin">
        SSLOptions +StdEnvVars
    </Directory>

    BrowserMatch ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0

    CustomLog /var/log/apache2/ssl_request.log \
        "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>                                  

<Proxy balancer://junkyardlist_com_cluster>
    BalancerMember http://127.0.0.1:7000
    BalancerMember http://127.0.0.1:7001
    BalancerMember http://127.0.0.1:7002
</Proxy>