Make use of $foreman::params::server_ssl_* in vhost conf.
add scl and epel repo configuration
Restrict SCL/EPEL to appropriate OS, add package dependencies
Change from theforeman/apache to puppetlabs/apache