Alias /koji "/usr/share/koji-web/scripts/"

<Directory "/usr/share/koji-web/scripts/">
    # Config for the publisher handler
    SetHandler mod_python
    # Use kojiweb's publisher (which handles errors more gracefully)
    # You can also use mod_python.publisher, but you will lose the pretty tracebacks
    PythonHandler kojiweb.publisher

    # General settings
    PythonDebug On
    PythonOption SiteName Koji
    PythonOption KojiHubURL http://koji.danny.cz/kojihub
    PythonOption KojiPackagesURL http://koji.danny.cz/packages
    PythonOption WebPrincipal koji/web@DANNY.CZ
    PythonOption WebKeytab /etc/httpd.keytab
    PythonOption WebCCache /var/tmp/kojiweb.ccache
    PythonOption WebCert /etc/pki/koji/kojiweb.pem
    PythonOption ClientCA /etc/pki/koji/koji_ca_cert.crt
    PythonOption KojiHubCA /etc/pki/koji/koji_ca_cert.crt
    PythonOption LoginTimeout 72
    # This must be changed before deployment
    PythonOption Secret CHANGE_ME
    PythonPath "sys.path + ['/usr/share/koji-web/lib']"
    PythonCleanupHandler kojiweb.handlers::cleanup
    PythonAutoReload Off
</Directory>

# uncomment this to enable authentication via Kerberos
# <Location /koji/login>
#     AuthType Kerberos
#     AuthName "Koji Web UI"
#     KrbMethodNegotiate on
#     KrbMethodK5Passwd off
#     KrbServiceName HTTP
#     KrbAuthRealm EXAMPLE.COM
#     Krb5Keytab /etc/httpd.keytab
#     KrbSaveCredentials off
#     Require valid-user
#     ErrorDocument 401 /koji-static/errors/unauthorized.html
# </Location>

# uncomment this to enable authentication via SSL client certificates
<Location /koji/login>
      SSLOptions +StdEnvVars
</Location>
# these options must be enabled globally (in ssl.conf)
# SSLVerifyClient require
# SSLVerifyDepth  10

Alias /koji-static/ "/usr/share/koji-web/static/"

<Directory "/usr/share/koji-web/static/">
    Options None
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Alias /packages/ "/opt/koji/packages/"

<Directory "/opt/koji/packages/">
    Options None
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>