SSLCertificateFile /etc/ssl/certs/chef.openstreetmap.org.pem
SSLCertificateKeyFile /etc/ssl/private/chef.openstreetmap.org.key
+ ProxyPassMatch ^/.*\.git/ !
ProxyPass / https://<%= node[:fqdn] %>:4443/
+ ProxyPreserveHost on
+
+ SetEnv GIT_PROJECT_ROOT /var/lib/git
+ SetEnv GIT_HTTP_EXPORT_ALL
+ ScriptAlias / /usr/lib/git-core/git-http-backend/
</VirtualHost>
+
+<Directory /usr/lib/git-core>
+ Options ExecCGI
+ Require ip <%= @git_allowed.sort.join(" ") %>
+</Directory>