apache.conf

<VirtualHost *:80>
  ServerAdmin you@myapp.com
  ServerName kibana.myapp.com
  RewriteEngine on
  ReWriteCond %{SERVER_PORT} !^443$
  RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
</VirtualHost>

<VirtualHost *:443>
  ServerAdmin you@myapp.com
  ServerName kibana.myapp.com

  SSLEngine on
  SSLProxyEngine on
  SSLCertificateFile /etc/apache2/ssl.key/STAR_myapp_com.crt
  SSLCertificateKeyFile /etc/apache2/ssl.key/STAR_myapp_com.key
  SSLCertificateChainFile /etc/apache2/ssl.key/STAR_myapp_com.ca-bundle
  Alias /kibana "/var/www/kibana/"
  ProxyPass /kibana !
  <Location /elasticsearch>
    Deny from all
    AuthUserFile /home/deploy/htpasswd
    AuthName authorization
    AuthType Basic
    Satisfy Any
    require valid-user
  </Location>

  ProxyRequests Off
  ProxyPreserveHost On
  <Location /elasticsearch>
    Deny from all
    AuthUserFile /home/deploy/htpasswd
    AuthName authorization
    AuthType Basic
    Satisfy Any
    require valid-user
    ProxyPass http://localhost:9200/ retry=0
    ProxyPassReverse http://localhost:9200/
  </Location>

  <Location />
    Deny from all
    AuthUserFile /home/deploy/htpasswd
    AuthName authorization
    AuthType Basic
    Satisfy Any
    require valid-user
    ProxyPass http://localhost:9090/ retry=0
    ProxyPassReverse http://localhost:9090/
  </Location>

  Header edit Location ^http://kibana.myapp.com https://kibana.myapp.com

  ErrorLog /var/log/apache2/kibana_myapp.error.log
  CustomLog /var/log/apache2/kibana_myapp.access.log combined
</VirtualHost>