summaryrefslogtreecommitdiff
path: root/ledgersmb-httpd.conf
diff options
context:
space:
mode:
Diffstat (limited to 'ledgersmb-httpd.conf')
-rw-r--r--ledgersmb-httpd.conf16
1 files changed, 15 insertions, 1 deletions
diff --git a/ledgersmb-httpd.conf b/ledgersmb-httpd.conf
index d7ab614d..f3460ffb 100644
--- a/ledgersmb-httpd.conf
+++ b/ledgersmb-httpd.conf
@@ -1,13 +1,27 @@
+# This file must be edited to substitute the current path with WORKING_DIR
+
Alias /ledgersmb WORKING_DIR/
<Directory WORKING_DIR>
+
+ # Rewrite rule to allow HTTP Authorization information to the scripts only
+ # from this directory.
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
+
AllowOverride All
AddHandler cgi-script .pl
Options ExecCGI Includes FollowSymlinks
+
+ # By default, only allow from localhost. If you change this, please be
+ # advised that you should use SSL protection on any and all network
+ # connections that access this application in order to protect usernames and
+ # passwords.
Order Allow,Deny
- Allow from All
+ Allow from 127.0.0.1
+ Deny from All
+
+ # The rest of this file just tightens up security.
<Files ~ "\.conf$">
Order Deny,Allow
Deny from All