You should move Foreman to a different Vhost, like foreman.example.com
.
Please note that the puppet masters' certificate has an alternative name foreman.example.com
on it, similar to puppet
or puppet.example.com
. So you will need to re-create the foreman hosts' cert with alt names.
puppet cert list --all | grep puppet.example.com
You should be able to use a different cert as well (not tested!)
puppet cert generate foreman.example.com
Config for the classes looks like this for me:
class { '::foreman':
foreman_url => 'https://foreman.example.com',
servername => 'foreman.example.com,
# if you use another cert
client_ssl_cert => '/var/lib/puppet/ssl/certs/foreman.example.com.pem',
client_ssl_key => '/var/lib/puppet/ssl/private_keys/foreman.example.com.pem',
server_ssl_cert => '/var/lib/puppet/ssl/certs/foreman.example.com.pem',
server_ssl_key => '/var/lib/puppet/ssl/private_keys/foreman.example.com.pem',
}
class { '::puppet':
server_foreman_url => 'https://foreman.example.com',
}
class { '::foreman_proxy':
foreman_base_url => 'https://foreman.example.com',
}
You should be able to set all the values in foreman-installer.