##
## On all sites, provide Tiny Tiny RSS on a default path: /tt-rss
## Allow all valid LDAP users.
##
Alias /tt-rss /usr/share/tt-rss/www
Alias /tt-rss-app /usr/share/tt-rss/www

<Location /tt-rss>
    Include includes/freedombox-single-sign-on.conf
    <IfModule mod_auth_pubtkt.c>
        TKTAuthToken "feed-reader" "admin"
    </IfModule>
</Location>

# URLs without further authentication. The URLs contain a unique key generated
# and managed by tt-rss. This includes articles marked public or even other
# categories.
<Location /tt-rss/public.php>
    Require all granted
</Location>

<Location /tt-rss-app>
    Include includes/freedombox-auth-ldap.conf
    Require ldap-group cn=admin,ou=groups,dc=thisbox
    Require ldap-group cn=feed-reader,ou=groups,dc=thisbox
</Location>