0000_any_443_domain.com.conf

<VirtualHost *:443>

  ServerName domain.com
  DocumentRoot "/Users/git/gitlab/public"
  CustomLog /var/log/apache2/access_log combinedvhost
  ErrorLog /var/log/apache2/error_log

  <IfModule mod_ssl.c>
    SSLEngine On
		SSLCipherSuite \
    "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-\
    AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-\
    SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:\
    ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:\
    ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:\
    ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-\
    AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-\
    SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:\
    AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!\
    DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!\
    KRB5-DES-CBC3-SHA"
		SSLHonorCipherOrder On
    SSLProtocol -ALL +TLSv1
    SSLProxyEngine On
    SSLCertificateFile "/etc/certificates/domain.com.cert.pem"
    SSLCertificateKeyFile "/etc/certificates/domain.com.key.pem"
    SSLCertificateChainFile "/etc/certificates/domain.com.chain.pem"
    SSLProxyProtocol -ALL +TLSv1
		SSLProxyCheckPeerCN off
		SSLProxyCheckPeerName off
  </IfModule>

  RewriteEngine On
  RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
  RewriteRule ^/(.*)$ balancer://unicornservers%{REQUEST_URI} [P,QSA,L]

  <Proxy balancer://unicornservers>
    BalancerMember http://127.0.0.1:8080
  </Proxy>

  <Directory "/Users/git/gitlab/public">
    Options All -Indexes -ExecCGI +Includes +MultiViews
    AllowOverride All
    <IfModule mod_dav.c>
      DAV Off
    </IfModule>
    <IfDefine !WEBSERVICE_ON>
      Deny from all
      ErrorDocument 403 /customerror/websitesoff403.html
    </IfDefine>
  </Directory>

</VirtualHost>