mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-06-27 23:57:02 +08:00
41 lines
1.1 KiB
Django/Jinja
41 lines
1.1 KiB
Django/Jinja
# noc1
|
|
ScriptAlias /nagios/cgi-bin/ /usr/lib64/nagios/cgi-bin/
|
|
|
|
ScriptAlias /tac.cgi /usr/lib64/nagios/cgi-bin/tac.cgi
|
|
|
|
<Location />
|
|
AuthName "Nagios GSSAPI Login"
|
|
{% if env == "production" %}
|
|
{% if vars['nagios_location'] == 'internal' %}
|
|
GssapiCredStore keytab:/etc/krb5.HTTP_nagios.fedoraproject.org.keytab
|
|
{% else %}
|
|
GssapiCredStore keytab:/etc/krb5.HTTP_nagios-external.fedoraproject.org.keytab
|
|
{% endif %}
|
|
{% else %}
|
|
{% if vars['nagios_location'] == 'internal' %}
|
|
GssapiCredStore keytab:/etc/krb5.HTTP_nagios.stg.fedoraproject.org.keytab
|
|
{% else %}
|
|
GssapiCredStore keytab:/etc/krb5.HTTP_nagios-external.stg.fedoraproject.org.keytab
|
|
{% endif %}
|
|
{% endif %}
|
|
AuthType GSSAPI
|
|
# This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
|
|
GssapiSSLonly Off
|
|
GssapiLocalName on
|
|
Require valid-user
|
|
</Location>
|
|
|
|
<Location ~ "/(nagios)/cgi-bin/">
|
|
Options ExecCGI
|
|
</Location>
|
|
|
|
<Directory "/usr/share/nagios/html">
|
|
Options None
|
|
</Directory>
|
|
|
|
RewriteEngine on
|
|
RewriteRule ^/$ /nagios/ [R]
|
|
|
|
Alias /nagios /usr/share/nagios/html/
|
|
|