NameVirtualHost *:443 ServerName %www_server% ServerAdmin %www_contact% SSLEngine On SSLCertificateFile /etc/apache2/ssl/server.crt SSLCertificateKeyFile /etc/apache2/ssl/server.key SSLCertificateChainFile /etc/apache2/ssl/ca.crt SSLProtocol all -SSLv2 SSLHonorCipherOrder on SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:AES256-GCM-SHA384:AES256-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:AES256-SHA:AES128-SHA:DES-CBC3-SHA ErrorLog /var/log/apache2/error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel warn CustomLog /var/log/apache2/access.log combined ServerSignature Email DocumentRoot %dir_www% DirectoryIndex index.php Options Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all # the subversion access config DAV svn SVNParentPath %dir_data%/repos # our access control policy AuthzSVNAccessFile %dir_data%/admin/svnaccessfile # try anonymous access first, resort to real # authentication if necessary Satisfy Any Require valid-user # how to authenticate a user AuthType Basic AuthName "Subversion repository" AuthBasicProvider svnlocal %PROVIDERS% # the dump access # first, do not allow direct access to dump.php Order allow,deny Deny from all # use the svn access rules for /svndump/repo SVNParentPath %dir_data%/repos AuthzSVNAccessFile %dir_data%/admin/%file_access% # try anonymous access first, resort to real # authentication if necessary Satisfy Any Require valid-user # how to authenticate a user AuthType Basic AuthName "Subversion repository" AuthBasicProvider svnlocal %PROVIDERS% # and rewrite it to a call to dump.php RewriteEngine On RewriteRule ^/svndump/(.*)$ /dump.php?repo=$1 [L] # use cgi-bin for viewvc ScriptAlias /viewvc /usr/lib/cgi-bin/viewvc.cgi SVNParentPath %dir_data%/repos AuthzSVNAccessFile %dir_data%/admin/%file_access% # try anonymous access first, resort to real # authentication if necessary Satisfy Any Require valid-user # how to authenticate a user AuthType Basic AuthName "Subversion repository" AuthBasicProvider svnlocal %PROVIDERS% # just use the cool rewritten url # RewriteRule ^/viewvc/(.*)$ /cgi-bin/viewvc.cgi/$1 [L] Alias /viewvc-doc /etc/viewvc/templates/docroot