<VirtualHost *:80>
    # Proxy to the Backend Server
    ProxyRequests Off
    ProxyPreserveHost on
    AllowEncodedSlashes NoDecode
    ProxyPass /git/ !
    ProxyPass / http://localhost:9000/ nocanon

    # Git Backend Configuration
    #DocumentRoot /var/git
    SetEnv GIT_PROJECT_ROOT /var/git
    SetEnv GIT_HTTP_EXPORT_ALL
    ScriptAlias /git/ /usr/lib/git-core/git-http-backend/

    RewriteCond %{QUERY_STRING} service=git-receive-pack [OR]
    RewriteCond %{REQUEST_URI} /git-receive-pack$
    RewriteRule ^/git/ - [E=AUTHREQUIRED:yes]

    #<Directory "/var/git">
    #    Require all granted
    #    Options +Indexes
    #</Directory>

    <LocationMatch "^/git/">
        Order Deny,Allow
        Deny from env=AUTHREQUIRED
        AuthType Basic
        AuthName "Git Access"
        AuthBasicProvider file
        AuthUserFile "/usr/local/apache/passwd/passwords"
        AuthGroupFile "/usr/local/apache/passwd/groups"
        Require group committers
        Satisfy Any
    </LocationMatch>

</VirtualHost>