From b9fe3fb4914865fffb2f8c3ec82e90f53c868af3 Mon Sep 17 00:00:00 2001
From: Veiko Aasa <veiko17@disroot.org>
Date: Thu, 9 Jul 2020 20:06:02 +0300
Subject: [PATCH] minidlna: Do not expose statistics over public web

Tested that after this change, only admins can see the MiniDLNA
statistics page https://<freedombox>/_minidlna/ over the web.

Everybody can still see the page on local network using
an address http://<freedombox>:8200/

MiniDLNA web page shows how many media files are served and
some information (IP, MAC address) about the connected clients.

Signed-off-by: Veiko Aasa <veiko17@disroot.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
---
 .../etc/apache2/conf-available/minidlna-freedombox.conf     | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/plinth/modules/minidlna/data/etc/apache2/conf-available/minidlna-freedombox.conf b/plinth/modules/minidlna/data/etc/apache2/conf-available/minidlna-freedombox.conf
index 544e0d862..aaaf5f876 100644
--- a/plinth/modules/minidlna/data/etc/apache2/conf-available/minidlna-freedombox.conf
+++ b/plinth/modules/minidlna/data/etc/apache2/conf-available/minidlna-freedombox.conf
@@ -1,3 +1,9 @@
 <Location /_minidlna/>
+    Include includes/freedombox-single-sign-on.conf
+
+    <IfModule mod_auth_pubtkt.c>
+        TKTAuthToken "admin"
+    </IfModule>
+
     ProxyPass http://localhost:8200/
 </Location>