diff --git a/roles/web-data-analysis/files/httpd_config.conf b/roles/web-data-analysis/files/httpd_config.conf
new file mode 100644
index 0000000000..52d897e6b6
--- /dev/null
+++ b/roles/web-data-analysis/files/httpd_config.conf
@@ -0,0 +1,10 @@
+
+<Location />
+  AuthName "Nagios GSSAPI Login"
+  GssapiCredStore keytab:/etc/krb5.HTTP_data-analysis.fedoraproject.org.keytab
+  AuthType GSSAPI
+  # This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
+  GssapiSSLonly Off
+  GssapiLocalName on
+  Require user smooge kevin puiterwijk
+</Location>