Nevermind about redirectPort, that's only used for Tomcat security constraints, which would be turned off. Although don't we want apache2 to still be the check here for Apache vs non-Apache config? I think all we really need to do is mess with the security constraint in web(-tomcat7).xml.erb