From ceaa417fad1acc400c610f17e2e59852aa5fe209 Mon Sep 17 00:00:00 2001
From: Holger Levsen <holger@layer-acht.org>
Date: Sat, 8 Dec 2012 15:34:53 +0100
Subject: allow certain params only from alioth (token is used to trigger
 builds)

---
 etc/apache2/sites-available/jenkins.debian.net | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'etc')

diff --git a/etc/apache2/sites-available/jenkins.debian.net b/etc/apache2/sites-available/jenkins.debian.net
index c26de24d..ddd739ee 100644
--- a/etc/apache2/sites-available/jenkins.debian.net
+++ b/etc/apache2/sites-available/jenkins.debian.net
@@ -21,13 +21,20 @@
 		Allow from all
 	</Directory>
 
+	# allow certain params only from alioth (token is used to trigger builds)
+	RewriteEngine on
+	RewriteCond %{REMOTE_ADDR} !217\.196\.43\.140
+	#RewriteCond %{REMOTE_HOST} !.*.debian.org
+	RewriteCond %{QUERY_STRING} token
+	RewriteRule ^ - [F]
+
         ProxyRequests Off
         <Proxy *>
                 Order deny,allow
                 Allow from all
         </Proxy>
         ProxyPreserveHost on
-	# proxy everything but /munin
+	# proxy everything but a few urls
         ProxyPass /munin !
        	ProxyPass /server-status !
        	ProxyPass /visitors-report.html !
-- 
cgit v1.2.3-70-g09d2