Benedek Nagy 1f83c92802
tt-rss: Restrict access to feed-reader group in "/tt-rss-app"
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
2022-02-14 18:03:02 -05:00

27 lines
786 B
Plaintext

##
## On all sites, provide Tiny Tiny RSS on a default path: /tt-rss
## Allow all valid LDAP users.
##
Alias /tt-rss /usr/share/tt-rss/www
Alias /tt-rss-app /usr/share/tt-rss/www
<Location /tt-rss>
Include includes/freedombox-single-sign-on.conf
<IfModule mod_auth_pubtkt.c>
TKTAuthToken "feed-reader" "admin"
</IfModule>
</Location>
# URLs without further authentication. The URLs contain a unique key generated
# and managed by tt-rss. This includes articles marked public or even other
# categories.
<Location /tt-rss/public.php>
Require all granted
</Location>
<Location /tt-rss-app>
Include includes/freedombox-auth-ldap.conf
Require ldap-group cn=admin,ou=groups,dc=thisbox
Require ldap-group cn=feed-reader,ou=groups,dc=thisbox
</Location>