From 696a7e36a619d8e5dde7bed754105e2a2ea6f5e2 Mon Sep 17 00:00:00 2001
From: Remi Collet <fedora@famillecollet.com>
Date: Thu, 8 May 2014 09:25:50 +0200
Subject: roundcubemail: 1.0.0

---
 roundcubemail.conf | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

(limited to 'roundcubemail.conf')

diff --git a/roundcubemail.conf b/roundcubemail.conf
index 5911949..5b67c20 100644
--- a/roundcubemail.conf
+++ b/roundcubemail.conf
@@ -4,6 +4,9 @@
 
 Alias /roundcubemail /usr/share/roundcubemail
 
+# Define who can access the Webmail
+# You can enlarge permissions once configured
+
 <Directory /usr/share/roundcubemail/>
     <IfModule mod_authz_core.c>
         # Apache 2.4
@@ -17,3 +20,30 @@ Alias /roundcubemail /usr/share/roundcubemail
         Allow from ::1
     </IfModule>
 </Directory>
+
+# Define who can access the installer
+# keep this secured once configured
+
+<Directory /usr/share/roundcubemail/installer/>
+    <IfModule mod_authz_core.c>
+        # Apache 2.4
+        Require local
+    </IfModule>
+    <IfModule !mod_authz_core.c>
+        # Apache 2.2
+        Order Deny,Allow
+        Deny from all
+        Allow from 127.0.0.1
+        Allow from ::1
+    </IfModule>
+</Directory>
+
+# Those directories should not be viewed by Web clients.
+<Directory /usr/share/roundcubemail/bin/>
+    Order Allow,Deny
+    Deny from all
+</Directory>
+<Directory /usr/share/roundcubemail/plugins/enigma/home/>
+    Order Allow,Deny
+    Deny from all
+</Directory>
-- 
cgit