-Alias /${instance}/ui /usr/share/ipsilon/ui
-WSGIScriptAlias /${instance} /usr/sbin/ipsilon
-WSGIDaemonProcess ${instance} user=ipsilon group=ipsilon home=${datadir}
+Alias /${instance}/ui ${staticdir}/ui
+Alias /.well-known ${wellknowndir}
+Alias /${instance}/cache /var/cache/ipsilon
+WSGIScriptAlias /${instance} ${ipsilondir}/ipsilon
+WSGIDaemonProcess ${instance} user=${sysuser} group=${sysuser} home=${datadir} display-name=ipsilon-${instance}
+${wsgi_socket}
<Location /${instance}>
WSGIProcessGroup ${instance}
+${sslrequiressl}
</Location>
-<Directory /usr/sbin>
+<Directory ${ipsilondir}>
Require all granted
</Directory>
-<Directory /usr/share/ipsilon>
+<Directory ${staticdir}>
Require all granted
</Directory>
+
+<Directory ${wellknowndir}>
+ Require all granted
+</Directory>
+<Location /.well-known/browserid>
+ ForceType application/json
+</Location>
+
+<Directory "/var/cache/ipsilon">
+ SetHandler None
+ AllowOverride None
+ Satisfy Any
+ Allow from all
+</Directory>