remove apache custom fragment

Author: saz

manifests/passenger.pp

@@ -99,20 +99,33 @@
   }
 
   apache::vhost { "puppet-${certname}":
-    port               => $puppet_passenger_port,
-    priority           => '40',
-    docroot            => $puppet_docroot,
-    serveradmin        => $apache_serveradmin,
-    servername         => $certname,
-    ssl                => true,
-    ssl_cert           => "${puppet_ssldir}/certs/${certname}.pem",
-    ssl_key            => "${puppet_ssldir}/private_keys/${certname}.pem",
-    ssl_chain          => "${puppet_ssldir}/ca/ca_crt.pem",
-    ssl_ca             => "${puppet_ssldir}/ca/ca_crt.pem",
-    ssl_crl            => "${puppet_ssldir}/ca/ca_crl.pem",
-    rack_base_uris     => '/',
-    custom_fragment    => template('puppet/apache_custom_fragment.erb'),
-    require            => [ File['/etc/puppet/rack/config.ru'], File[$puppet_conf] ],
+    port              => $puppet_passenger_port,
+    priority          => '40',
+    docroot           => $puppet_docroot,
+    serveradmin       => $apache_serveradmin,
+    servername        => $certname,
+    ssl               => true,
+    ssl_cert          => "${puppet_ssldir}/certs/${certname}.pem",
+    ssl_key           => "${puppet_ssldir}/private_keys/${certname}.pem",
+    ssl_chain         => "${puppet_ssldir}/ca/ca_crt.pem",
+    ssl_ca            => "${puppet_ssldir}/ca/ca_crt.pem",
+    ssl_crl           => "${puppet_ssldir}/ca/ca_crl.pem",
+    ssl_protocol      => '-ALL +SSLv3 +TLSv1',
+    ssl_cipher        => 'ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP',
+    ssl_verify_client => 'optional',
+    ssl_verify_depth  => '1',
+    ssl_options       => ['+StdEnvVars', '+ExportCertData'],
+    rack_base_uris    => '/',
+    directories       => [
+      {
+        path => $puppet_docroot,
+      },
+      {
+        path    => '/etc/puppet/rack',
+        options => 'None',
+      },
+    ],
+    require         => [ File['/etc/puppet/rack/config.ru'], File[$puppet_conf] ],
   }
 
   #Hack to add extra passenger configurations for puppetmaster