AuthType Basic AuthName "Slackware UK Admins' Portal" AuthBasicProvider ldap AuthLDAPBindDN "Anonymous Bind@slackware.uk.internal" AuthLDAPBindPassword "Anonymous Bind" AuthLDAPURL ldap://core.slackware.uk.internal/cn=Users,dc=slackware,dc=uk,dc=internal?sAMAccountName?sub?(objectClass=*) LDAPTrustedClientCert CERT_BASE64 /etc/certificates/core.slackware.uk.internal_cert.pem # # Require ldap-group cn=Admin Portal,cn=Users,dc=slackware,dc=uk,dc=internal # Options +FollowSymLinks AllowOverride All Require ldap-group cn=Admin Portal,cn=Users,dc=slackware,dc=uk,dc=internal RewriteEngine On RewriteBase //wiki RewriteRule ^lib - [L] RewriteRule ^doku.php - [L] RewriteRule ^feed.php - [L] RewriteRule ^_media/(.*) lib/exe/fetch.php?media=$1 [QSA,L] RewriteRule ^_detail/(.*) lib/exe/detail.php?media=$1 [QSA,L] RewriteRule ^_export/([^/]+)/(.*) doku.php?do=export_$1&id=$2 [QSA,L] RewriteRule ^$ doku.php [L] RewriteRule (.*) doku.php?id=$1 [QSA,L] Require all denied Options FollowSymlinks AllowOverride None Require ldap-group cn=Admin Portal,cn=Users,dc=slackware,dc=uk,dc=internal Require ldap-group cn=Admin Portal,cn=Users,dc=slackware,dc=uk,dc=internal ServerName core.slackware.uk.net SetEnvIf REQUEST_URI ^/robots\.txt$ no_log SetEnvIf REQUEST_URI ^/favicon\.ico$ no_log SetEnvIf REQUEST_URI ^/\.well-known/.*$ no_log RedirectMatch 403 ^/(?!(\.well-known|httpd-errordocs)/)(.*) ServerName core.slackware.uk.net SSLEngine On SSLCertificateFile /etc/certificates/core.slackware.uk.net_cert.pem SSLCertificateKeyFile /etc/certificates/core.slackware.uk.net_key.pem SSLCertificateChainFile /etc/certificates/core.slackware.uk.net_chain.pem SetEnvIf REQUEST_URI ^/robots\.txt$ no_log SetEnvIf REQUEST_URI ^/favicon\.ico$ no_log ScriptAlias /cgi-bin/ /data/sites/core.slackware.uk.net/cgi-bin/ DocumentRoot /data/sites/core.slackware.uk.net/html Alias /pla /usr/share/phpldapadmin/htdocs Alias /wiki /usr/share/dokuwiki/ AliasMatch ^/wiki/sites/[^/]+$ /usr/share/dokuwiki/ AliasMatch ^/wiki/sites/[^/]+/(.*)$ /usr/share/dokuwiki/$1 # # WSGIDaemonProcess vaelyria python-home=/opt/venvs/vaelyria # WSGIProcessGroup vaelyria # WSGIApplicationGroup %{GLOBAL} # WSGIScriptAlias /vaelyria /opt/gitrepos/vaelyria.git/app.py # AuthType Basic AuthName "Slackware UK Admins' Portal" Require valid-user AuthBasicProvider ldap AuthLDAPBindDN AnonBind@slackware.uk.internal AuthLDAPBindPassword "Anonymous Bind" AuthLDAPURL ldap://core.slackware.uk.internal/cn=Users,dc=slackware,dc=uk,dc=internal?sAMAccountName?sub?(objectClass=*) LDAPTrustedClientCert CERT_BASE64 /etc/certificates/core.slackware.uk.internal_cert.pem # Note: Dot not add backslashes to the end of the urls. ProxyPass /prometheus http://127.0.0.1:9090 ProxyPassReverse /prometheus http://127.0.0.1:9090 ProxyPass /ts http://127.0.0.1:9200 ProxyPassReverse /ts http://127.0.0.1:9200