From cb8b0c935d572ac31bf9502104ab95f355f53f40 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <patrick@puiterwijk.org>
Date: Wed, 1 May 2019 22:46:12 +0200
Subject: [PATCH] Restrict Proxy server-status to localhost for now

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
---
 roles/httpd/proxy/templates/httpd.conf.j2 | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/httpd/proxy/templates/httpd.conf.j2 b/roles/httpd/proxy/templates/httpd.conf.j2
index 56cbee3da0..00947131f0 100644
--- a/roles/httpd/proxy/templates/httpd.conf.j2
+++ b/roles/httpd/proxy/templates/httpd.conf.j2
@@ -760,6 +760,11 @@ BrowserMatch "^gnome-vfs" redirect-carefully
 ProxyTimeout 1200
 <Location /apache-status>
     SetHandler server-status
+    <RequireAny>
+        Require ip 127.0.0.1
+	Require ip ::1
+	Require host localhost
+    </RequireAny>
 </Location>
 
 # Try and enable these to improve performance