Thanks to your PR above @ekohl and a few other web resources I got it going. I created a gist of what I ran on each server to have Foreman on one, and a smart-proxy + Puppet on the other linked up.
One thing to note. I assume because the puppet CA isn’t on the Foreman server the foreman-installer can’t create the certificates used in the apache2 config. As such apache2 starts on port 80 but not on 443. However, foreman-installer reports Success! and Foreman is running at https://... but in fact it is not. Maybe the installer should check it can connect to the foreman web interface?
