SetEnv GIT_PROJECT_ROOT /srv/git/repositories

AliasMatch ^/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$          /srv/git/repositories/$1
AliasMatch ^/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/git/repositories/$1

<Location />
  AuthType oauth20
  Require all granted
</Location>
<LocationMatch ".*/git-receive-pack">
  AuthType oauth20
  Require claims_expr '(.scope | index("https://src.fedoraproject.org/push") != null)'
</LocationMatch>

<LocationMatch "/info/refs">
  <If "%{QUERY_STRING} =~ /service=git-upload-pack/">
    Require all granted
  </If>
  <Else>
    AuthType oauth20
    Require claims_expr '(.scope | index("https://src.fedoraproject.org/push") != null)'
  </Else>
</LocationMatch>

SuexecUserGroup pagure packager

ScriptAliasMatch \
  "(?x)^/(.*/(HEAD | \
  info/refs | \
  objects/info/[^/]+ | \
  git-(upload|receive)-pack))$" \
  /var/www/bin/gitolite-suexec-wrapper.sh/