Strenghten default Security options in IDP

[cascardo/ipsilon.git] / templates / install / idp.conf

diff --git a/templates/install/idp.conf b/templates/install/idp.conf
index 6d5c493..19af096 100644 (file)
--- a/templates/install/idp.conf
+++ b/templates/install/idp.conf
@@ -1,12 +1,17 @@
-Alias /idp/ui /usr/share/ipsilon/ui
-WSGIScriptAlias /idp /usr/sbin/ipsilon
-WSGIDaemonProcess idp user=ipsilon group=ipsilon
-WSGIProcessGroup idp
+Alias /${instance}/ui ${staticdir}/ui
+WSGIScriptAlias /${instance} ${ipsilondir}/ipsilon
+WSGIDaemonProcess ${instance} user=${sysuser} group=${sysuser} home=${datadir}
+${wsgi_socket}
 
-<Directory /usr/sbin>
+<Location /${instance}>
+    WSGIProcessGroup ${instance}
+${sslrequiressl}
+</Location>
+
+<Directory ${ipsilondir}>
     Require all granted
 </Directory>
 
-<Directory /usr/share/ipsilon>
+<Directory ${staticdir}>
     Require all granted
 </Directory>