hgweb和Apache中的每个存储库都有单独的安全指令

Question

我有几个Mercurial存储库使用hgweb发布，并使用Apache 2.2 进行保护

有没有办法拥有多种安全配置？

我希望为大多数存储库提供默认配置，然后为特定存储库提供单独的配置。

httpd.conf文件看起来像这个

WSGIScriptAlias /hg "C:/hg/hgweb/hgweb.wsgi"
<Directory "/hg/repo_one">
    Order deny,allow
    AuthType Basic
    AuthName "R1 Secure Area"
    AuthBasicProvider file 
    AuthUserFile c:/apache2.2/repo_one.pwd
    Require valid-user
</Directory>
<Directory "/hg">
    Order deny,allow
    AuthType Basic
    AuthName "Secure Area"
    AuthBasicProvider file 
    AuthUserFile c:/apache2.2/passwords
    Require valid-user
</Directory>

Answer 1

以下是我所做的工作。

我将需要单独安全性的存储库移到了自己的目录中，该目录是siblng，而不是child

我的目录结构现在看起来像这个

c:hg-pubhgweb.wsgi
c:hg-pubhgweb.config
c:hg-pubrepo-one.hg
...
c:hghgweb.wsgi
c:hghgweb.config
c:hgrepo-two.hg
c:hgrepo-three.hg

我的httpd.conf文件看起来像这个

WSGIScriptAlias /hg "C:/hg/hgweb.wsgi"
WSGIScriptAlias /pub/hg "C:/hg-pub/hgweb.wsgi"
<Directory "C:/hg-pub">
    Order deny,allow
    AuthType Basic
    AuthName "R1 Secure Area"
    AuthBasicProvider file 
    AuthUserFile c:/apache2.2/repo_one.pwd
    Require valid-user
</Directory>
<Directory "C:/hg">
    Order deny,allow
    AuthType Basic
    AuthName "Secure Area"
    AuthBasicProvider file 
    AuthUserFile c:/apache2.2/passwords
    Require valid-user
</Directory>

需要注意的重要事项是

1. 两个存储库位置在磁盘上完全分离
2. 两个WSGIScriptAlias路径完全独立