From 6d681d439872bef46243c685a17c55b6da7b6454 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Sat, 10 Dec 2016 03:26:34 +0000
Subject: [PATCH] Allow upload lookaside via src

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/distgit/templates/lookaside-upload.conf | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/roles/distgit/templates/lookaside-upload.conf b/roles/distgit/templates/lookaside-upload.conf
index 48b8dfd449..4425f062e7 100644
--- a/roles/distgit/templates/lookaside-upload.conf
+++ b/roles/distgit/templates/lookaside-upload.conf
@@ -83,3 +83,27 @@ SSLCryptoDevice builtin
 
 </VirtualHost>
 
+# Allow upload via src
+<VirtualHost _default_:80>
+    # This alias must come before the /repo/ one to avoid being overridden.
+    ScriptAlias /repo/pkgs/upload.cgi /srv/web/upload.cgi
+
+    Alias /repo/ /srv/cache/lookaside/
+    ServerName src.fedoraproject.org
+    ServerAdmin webmaster@fedoraproject.org
+
+    ErrorLog logs/ssl_error_log
+
+   <Location /repo/pkgs/upload.cgi>
+       Options +ExecCGI
+
+       AuthType GSSAPI
+       GssapiSSLonly On
+       AuthName "GSSAPI Single Sign On Login"
+       GssapiCredStore keytab:/etc/httpd.keytab
+
+       Require valid-user
+    </Location>
+
+</VirtualHost>
+