Foreman on NginX+Passenger

foreman

## Puppet Foreman
server {
	listen 443 ssl; 
	ssl_certificate    	  ssl/foreman.xxx.com.crt;
	ssl_certificate_key    	  ssl/foreman.xxx.com.key;
	ssl_session_timeout       10m;
	add_header Strict-Transport-Security max-age=15768000;

	server_name foreman.xxx.com;

	access_log  /var/log/nginx/foreman.access.log;
	error_log   /var/log/nginx/foreman.error.log;
	
	root /opt/foreman/public;

	location / {
		passenger_enabled on;
		auth_basic            "Restricted!!!";
		auth_basic_user_file  .htpasswd;
	}
  
}

server {
	listen 127.0.0.1:3000;
	root /opt/foreman/public;
	passenger_enabled on;
	access_log   off;
	allow 127.0.0.1;
	deny all;
}