diff --git a/templates/pulp.conf.erb b/templates/pulp.conf.erb
index 6ec496cc..02a08dbd 100644
--- a/templates/pulp.conf.erb
+++ b/templates/pulp.conf.erb
@@ -17,15 +17,19 @@ SSLInsecureRenegotiation on
 
 WSGIProcessGroup pulp
 WSGIApplicationGroup pulp
-WSGIDaemonProcess pulp user=apache group=apache processes=1 threads=8 display-name=%{GROUP}
+WSGIDaemonProcess pulp user=apache group=apache processes=3 display-name=%{GROUP}
 
 # DEBUG - uncomment the next 2 lines to enable debugging
 #WSGIRestrictStdin Off
 #WSGIRestrictStdout Off
 
 WSGISocketPrefix run/wsgi
-WSGIScriptAlias /pulp/api /srv/pulp/webservices.wsgi
-WSGIImportScript /srv/pulp/webservices.wsgi process-group=pulp application-group=pulp
+WSGIScriptAlias /pulp/api /usr/share/pulp/wsgi/webservices.wsgi
+WSGIImportScript /usr/share/pulp/wsgi/webservices.wsgi process-group=pulp application-group=pulp
+
+<Directory /usr/share/pulp/wsgi>
+    Require all granted
+</Directory>
 
 <Files webservices.wsgi>
     WSGIPassAuthorization On
@@ -38,6 +42,14 @@ WSGIImportScript /srv/pulp/webservices.wsgi process-group=pulp application-group
     SSLVerifyClient optional
 </Files>
 
+Alias /pulp/static /var/lib/pulp/static
+
+<Location /pulp/static>
+    SSLRequireSSL
+    Options +Indexes
+    Require all granted
+</Location>
+
 <%- if scope.lookupvar('operatingsystem') == 'Fedora' && scope.lookupvar('operatingsystemrelease') == '18' -%>
 <Directory /srv/pulp>
   Require all granted