ledgersmb-httpd.conf.in

# This file must be edited to substitute the current path with public

Alias /ledgersmb public/

<Directory @TOPDIR@/public>

  # Rewrite rule to allow HTTP Authorization information to the scripts only
  # from this directory.
  RewriteEngine On

  # Redirect the /ledgersmb and /ledgersmb/ URL paths to
  # the true login script: /ledgersmb/login.pl
  RewriteRule ^/ledgersmb/?$ /ledgersmb/login.pl [R]

  # Indicate that the HTTP Authorization data should be passed
  # to the CGI scripts running from this directory
  RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]

  AllowOverride All
  AddHandler cgi-script .pl
  Options ExecCGI Includes FollowSymlinks

  SetEnv PERL5LIB @TOPDIR@/ledgersmb

  # By default, only allow from localhost.  If you change this, please be
  # advised that you should use SSL protection on any and all network
  # connections that access this application in order to protect usernames and
  # passwords.
  Order Deny,Allow
  Allow from 127.0.0.1
  Allow from localhost
  Deny from All

  # The rest of this file just tightens up security.
  <Files ~ "\.conf$">
    Order Deny,Allow
    Deny from All
  </Files>
</Directory>

<Directory @TOPDIR@/public/users>
  Order Deny,Allow
  Deny from All
</Directory>

<Directory @TOPDIR@/public/bin>
  Order Deny,Allow
  Deny from All
</Directory>

<Directory @TOPDIR@/public/utils>
  Order Deny,Allow
  Deny from All
</Directory>

<Directory @TOPDIR@/public/spool>
  Order Deny,Allow
  Deny from All
</Directory>

<Directory @TOPDIR@/public/templates>
  Order Deny,Allow
  Deny from All
</Directory>

<Directory @TOPDIR@/public/LedgerSMB>
  Order Deny,Allow
  Deny from All
</Directory>