Adjust vhost settings to also allow raw files to be downloaded

templates/default-ssl

+# See https://gitlab.com/gitlab-org/gitlab-recipes/blob/master/web-server/apache/gitlab-omnibus-ssl-apache24.conf
 <VirtualHost _default_:443>
   Include /etc/apache2/{{ apache_conf_dir }}/global-redirect.conf
 
@@ -23,13 +24,10 @@
   AllowEncodedSlashes NoDecode
 
   <Location />
-      Order deny,allow
-      Allow from all
+      Require all granted
 
       #Allow forwarding to gitlab-git-http-server
       ProxyPassReverse http://127.0.0.1:8181
-      #Allow forwarding to GitLab Rails app (Unicorn)
-      ProxyPassReverse http://127.0.0.1:8080
       ProxyPassReverse http://{{ gitlab_domain }}/
   </Location>
 
@@ -38,24 +36,20 @@
   # http://stackoverflow.com/questions/10954516/apache2-proxypass-for-rails-app-gitlab
   RewriteEngine on
 
-  #Forward these requests to gitlab-git-http-server
-  RewriteCond %{REQUEST_URI} ^/[\w\.-]+/[\w\.-]+/gitlab-lfs/objects.* [OR]
-  RewriteCond %{REQUEST_URI} ^/[\w\.-]+/[\w\.-]+/builds/download.* [OR]
-  RewriteCond %{REQUEST_URI} ^/[\w\.-]+/[\w\.-]+/repository/archive.* [OR]
-  RewriteCond %{REQUEST_URI} ^/api/v3/projects/.*/repository/archive.* [OR]
-  RewriteCond %{REQUEST_URI} ^/ci/api/v1/builds/[0-9]+/artifacts.* [OR]
-  RewriteCond %{REQUEST_URI} ^/[\w\.-]+/[\w\.-]+/(info/refs|git-upload-pack|git-receive-pack)$
-  RewriteRule .* http://127.0.0.1:8181%{REQUEST_URI} [P,QSA]
+  #Don't escape encoded characters in api requests
+  RewriteCond %{REQUEST_URI} ^/api/v3/.*
+  RewriteRule .* http://127.0.0.1:8181%{REQUEST_URI} [P,QSA,NE]
 
-  #Forward any other requests to GitLab Rails app (Unicorn)
+  #Forward all requests to gitlab-workhorse except existing files like error documents
   RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f [OR]
-  RewriteCond %{REQUEST_URI} ^/uploads
-  RewriteRule .* http://127.0.0.1:8080%{REQUEST_URI} [P,QSA,NE]
+  RewriteCond %{REQUEST_URI} ^/uploads/.*
+  RewriteRule .* http://127.0.0.1:8181%{REQUEST_URI} [P,QSA]
+
   RequestHeader set X_FORWARDED_PROTO 'https'
   RequestHeader set X-Forwarded-Ssl on
 
   # needed for downloading attachments
-  DocumentRoot /var/opt/gitlab
+  DocumentRoot /opt/gitlab/embedded/service/gitlab-rails/public
 
   #Set up apache error documents, if back end goes down (i.e. 503 error) then a maintenance/deploy page is thrown up.
   ErrorDocument 404 /404.html