Alias /epylog /srv/web/epylog

# need these to do the auth
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authn_file_module modules/mod_authn_file.so

<Directory /srv/web/epylog>
    Options FollowSymLinks Indexes
    AuthName "Epylog GSSAPI Login"
    GssapiCredStore keytab:/etc/krb5.HTTP_admin.fedoraproject.org.keytab
    AuthType GSSAPI
    # This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
    GssapiSSLonly Off
    GssapiLocalName on
    # This should coincide with sysadmin-logs until we have group info
    Require user codeblock kevin puiterwijk ralph smooge nb cydrobolt
</Directory>

