t/lib-httpd/apache.conf

   1 ServerName dummy
   2 PidFile httpd.pid
   3 DocumentRoot www
   4 LogFormat "%h %l %u %t \"%r\" %>s %b" common
   5 CustomLog access.log common
   6 ErrorLog error.log
   7 <IfModule !mod_log_config.c>
   8         LoadModule log_config_module modules/mod_log_config.so
   9 </IfModule>
  10 <IfModule !mod_alias.c>
  11         LoadModule alias_module modules/mod_alias.so
  12 </IfModule>
  13 <IfModule !mod_cgi.c>
  14         LoadModule cgi_module modules/mod_cgi.so
  15 </IfModule>
  16 <IfModule !mod_env.c>
  17         LoadModule env_module modules/mod_env.so
  18 </IfModule>
  19 <IfModule !mod_rewrite.c>
  20         LoadModule rewrite_module modules/mod_rewrite.so
  21 </IFModule>
  22 <IfModule !mod_version.c>
  23         LoadModule version_module modules/mod_version.so
  24 </IfModule>
  25 <IfModule !mod_headers.c>
  26         LoadModule headers_module modules/mod_headers.so
  27 </IfModule>
  28 <IfModule !mod_setenvif.c>
  29         LoadModule setenvif_module modules/mod_setenvif.so
  30 </IfModule>
  31
  32 <IfVersion < 2.4>
  33 LockFile accept.lock
  34 </IfVersion>
  35
  36 <IfVersion < 2.1>
  37 <IfModule !mod_auth.c>
  38         LoadModule auth_module modules/mod_auth.so
  39 </IfModule>
  40 </IfVersion>
  41
  42 <IfVersion >= 2.1>
  43 <IfModule !mod_auth_basic.c>
  44         LoadModule auth_basic_module modules/mod_auth_basic.so
  45 </IfModule>
  46 <IfModule !mod_authn_file.c>
  47         LoadModule authn_file_module modules/mod_authn_file.so
  48 </IfModule>
  49 <IfModule !mod_authz_user.c>
  50         LoadModule authz_user_module modules/mod_authz_user.so
  51 </IfModule>
  52 <IfModule !mod_authz_host.c>
  53         LoadModule authz_host_module modules/mod_authz_host.so
  54 </IfModule>
  55 </IfVersion>
  56
  57 <IfVersion >= 2.4>
  58 <IfModule !mod_authn_core.c>
  59         LoadModule authn_core_module modules/mod_authn_core.so
  60 </IfModule>
  61 <IfModule !mod_authz_core.c>
  62         LoadModule authz_core_module modules/mod_authz_core.so
  63 </IfModule>
  64 <IfModule !mod_access_compat.c>
  65         LoadModule access_compat_module modules/mod_access_compat.so
  66 </IfModule>
  67 <IfModule !mod_mpm_prefork.c>
  68         LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
  69 </IfModule>
  70 <IfModule !mod_unixd.c>
  71         LoadModule unixd_module modules/mod_unixd.so
  72 </IfModule>
  73 </IfVersion>
  74
  75 PassEnv GIT_VALGRIND
  76 PassEnv GIT_VALGRIND_OPTIONS
  77 PassEnv GNUPGHOME
  78 PassEnv ASAN_OPTIONS
  79 PassEnv GIT_TRACE
  80 PassEnv GIT_CONFIG_NOSYSTEM
  81
  82 SetEnvIf Git-Protocol ".*" GIT_PROTOCOL=$0
  83
  84 Alias /dumb/ www/
  85 Alias /auth/dumb/ www/auth/dumb/
  86
  87 <LocationMatch /smart/>
  88         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
  89         SetEnv GIT_HTTP_EXPORT_ALL
  90 </LocationMatch>
  91 <LocationMatch /smart_noexport/>
  92         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
  93 </LocationMatch>
  94 <LocationMatch /smart_custom_env/>
  95         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
  96         SetEnv GIT_HTTP_EXPORT_ALL
  97         SetEnv GIT_COMMITTER_NAME "Custom User"
  98         SetEnv GIT_COMMITTER_EMAIL custom@example.com
  99 </LocationMatch>
 100 <LocationMatch /smart_namespace/>
 101         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
 102         SetEnv GIT_HTTP_EXPORT_ALL
 103         SetEnv GIT_NAMESPACE ns
 104 </LocationMatch>
 105 <LocationMatch /smart_cookies/>
 106         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
 107         SetEnv GIT_HTTP_EXPORT_ALL
 108         Header set Set-Cookie name=value
 109 </LocationMatch>
 110 <LocationMatch /smart_headers/>
 111         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
 112         SetEnv GIT_HTTP_EXPORT_ALL
 113 </LocationMatch>
 114 <LocationMatch /one_time_sed/>
 115         SetEnv GIT_EXEC_PATH ${GIT_EXEC_PATH}
 116         SetEnv GIT_HTTP_EXPORT_ALL
 117 </LocationMatch>
 118 ScriptAliasMatch /error_git_upload_pack/(.*)/git-upload-pack error.sh/
 119 ScriptAliasMatch /smart_*[^/]*/(.*) ${GIT_EXEC_PATH}/git-http-backend/$1
 120 ScriptAlias /broken_smart/ broken-smart-http.sh/
 121 ScriptAlias /error/ error.sh/
 122 ScriptAliasMatch /one_time_sed/(.*) apply-one-time-sed.sh/$1
 123 <Directory ${GIT_EXEC_PATH}>
 124         Options FollowSymlinks
 125 </Directory>
 126 <Files broken-smart-http.sh>
 127         Options ExecCGI
 128 </Files>
 129 <Files error.sh>
 130   Options ExecCGI
 131 </Files>
 132 <Files apply-one-time-sed.sh>
 133         Options ExecCGI
 134 </Files>
 135 <Files ${GIT_EXEC_PATH}/git-http-backend>
 136         Options ExecCGI
 137 </Files>
 138
 139 RewriteEngine on
 140 RewriteRule ^/dumb-redir/(.*)$ /dumb/$1 [R=301]
 141 RewriteRule ^/smart-redir-perm/(.*)$ /smart/$1 [R=301]
 142 RewriteRule ^/smart-redir-temp/(.*)$ /smart/$1 [R=302]
 143 RewriteRule ^/smart-redir-auth/(.*)$ /auth/smart/$1 [R=301]
 144 RewriteRule ^/smart-redir-limited/(.*)/info/refs$ /smart/$1/info/refs [R=301]
 145 RewriteRule ^/ftp-redir/(.*)$ ftp://localhost:1000/$1 [R=302]
 146
 147 RewriteRule ^/loop-redir/x-x-x-x-x-x-x-x-x-x-x-x-x-x-x-x-x-x-x-x-(.*) /$1 [R=302]
 148 RewriteRule ^/loop-redir/(.*)$ /loop-redir/x-$1 [R=302]
 149
 150 # redir-to/502/x?y -> really-redir-to?path=502/x&qs=y which returns 502
 151 # redir-to/x?y -> really-redir-to?path=x&qs=y -> x?y
 152 RewriteCond %{QUERY_STRING} ^(.*)$
 153 RewriteRule ^/redir-to/(.*)$ /really-redir-to?path=$1&qs=%1 [R=302]
 154 RewriteCond %{QUERY_STRING} ^path=502/(.*)&qs=(.*)$
 155 RewriteRule ^/really-redir-to$ - [R=502,L]
 156 RewriteCond %{QUERY_STRING} ^path=(.*)&qs=(.*)$
 157 RewriteRule ^/really-redir-to$ /%1?%2 [R=302]
 158
 159 # The first rule issues a client-side redirect to something
 160 # that _doesn't_ look like a git repo. The second rule is a
 161 # server-side rewrite, so that it turns out the odd-looking
 162 # thing _is_ a git repo. The "[PT]" tells Apache to match
 163 # the usual ScriptAlias rules for /smart.
 164 RewriteRule ^/insane-redir/(.*)$ /intern-redir/$1/foo [R=301]
 165 RewriteRule ^/intern-redir/(.*)/foo$ /smart/$1 [PT]
 166
 167 # Serve info/refs internally without redirecting, but
 168 # issue a redirect for any object requests.
 169 RewriteRule ^/redir-objects/(.*/info/refs)$ /dumb/$1 [PT]
 170 RewriteRule ^/redir-objects/(.*/objects/.*)$ /dumb/$1 [R=301]
 171
 172 # Apache 2.2 does not understand <RequireAll>, so we use RewriteCond.
 173 # And as RewriteCond does not allow testing for non-matches, we match
 174 # the desired case first (one has abra, two has cadabra), and let it
 175 # pass by marking the RewriteRule as [L], "last rule, do not process
 176 # any other matching RewriteRules after this"), and then have another
 177 # RewriteRule that matches all other cases and lets them fail via '[F]',
 178 # "fail the request".
 179 RewriteCond %{HTTP:x-magic-one} =abra
 180 RewriteCond %{HTTP:x-magic-two} =cadabra
 181 RewriteRule ^/smart_headers/.* - [L]
 182 RewriteRule ^/smart_headers/.* - [F]
 183
 184 <IfDefine SSL>
 185 LoadModule ssl_module modules/mod_ssl.so
 186
 187 SSLCertificateFile httpd.pem
 188 SSLCertificateKeyFile httpd.pem
 189 SSLRandomSeed startup file:/dev/urandom 512
 190 SSLRandomSeed connect file:/dev/urandom 512
 191 SSLSessionCache none
 192 SSLMutex file:ssl_mutex
 193 SSLEngine On
 194 </IfDefine>
 195
 196 <Location /auth/>
 197         AuthType Basic
 198         AuthName "git-auth"
 199         AuthUserFile passwd
 200         Require valid-user
 201 </Location>
 202
 203 <LocationMatch "^/auth-push/.*/git-receive-pack$">
 204         AuthType Basic
 205         AuthName "git-auth"
 206         AuthUserFile passwd
 207         Require valid-user
 208 </LocationMatch>
 209
 210 <LocationMatch "^/auth-fetch/.*/git-upload-pack$">
 211         AuthType Basic
 212         AuthName "git-auth"
 213         AuthUserFile passwd
 214         Require valid-user
 215 </LocationMatch>
 216
 217 RewriteCond %{QUERY_STRING} service=git-receive-pack [OR]
 218 RewriteCond %{REQUEST_URI} /git-receive-pack$
 219 RewriteRule ^/half-auth-complete/ - [E=AUTHREQUIRED:yes]
 220
 221 <Location /half-auth-complete/>
 222   Order Deny,Allow
 223   Deny from env=AUTHREQUIRED
 224
 225   AuthType Basic
 226   AuthName "Git Access"
 227   AuthUserFile passwd
 228   Require valid-user
 229   Satisfy Any
 230 </Location>
 231
 232 <IfDefine DAV>
 233         LoadModule dav_module modules/mod_dav.so
 234         LoadModule dav_fs_module modules/mod_dav_fs.so
 235
 236         DAVLockDB DAVLock
 237         <Location /dumb/>
 238                 Dav on
 239         </Location>
 240         <Location /auth/dumb>
 241                 Dav on
 242         </Location>
 243 </IfDefine>
 244
 245 <IfDefine SVN>
 246         LoadModule dav_svn_module modules/mod_dav_svn.so
 247
 248         <Location /${LIB_HTTPD_SVN}>
 249                 DAV svn
 250                 SVNPath "${LIB_HTTPD_SVNPATH}"
 251         </Location>
 252 </IfDefine>