-Alias /${instance}/ui /usr/share/ipsilon/ui
-WSGIScriptAlias /${instance} /usr/sbin/ipsilon
-WSGIDaemonProcess ${instance} user=ipsilon group=ipsilon home=${datadir}
-WSGIProcessGroup ${instance}
+Alias /${instance}/ui ${staticdir}/ui
+Alias /.well-known ${wellknowndir}
+WSGIScriptAlias /${instance} ${ipsilondir}/ipsilon
+WSGIDaemonProcess ${instance} user=${sysuser} group=${sysuser} home=${datadir} display-name=ipsilon-${instance}
+${wsgi_socket}
-<Directory /usr/sbin>
+<Location /${instance}>
+ WSGIProcessGroup ${instance}
+${sslrequiressl}
+</Location>
+
+<Directory ${ipsilondir}>
+ Require all granted
+</Directory>
+
+<Directory ${staticdir}>
Require all granted
</Directory>
-<Directory /usr/share/ipsilon>
+<Directory ${wellknowndir}>
Require all granted
</Directory>
+<Location /.well-known/browserid>
+ ForceType application/json
+</Location>