RewriteEngine On RewriteCond "%{HTTP:AUTHORIZATION}" "!= %SECURITYTOKEN%" RewriteRule "(.+)/private/" "-" [F] ProxyPass "unix:/var/lib/taler-merchant/httpd/merchant.sock|http://example.com/" RequestHeader add "X-Forwarded-Proto" "https"