# When using Zoneminder's own authentication, recorded CCTV images are
# accessible from the web directly without passing the authentication. This
# means any attacker could see your CCTV images without a password. In order
# to avoid this you can disable Zoneminder's authentication and configure
# standard Apache authentication (see the Apache documentation for details on
# this).
#
# If you still wish to use Zoneminder's own authentication, or have an
# internal site which needs no authentication, you can leave this configuration 
# as it is.
# Otherwise un-comment the line with "UNCOMMENT THIS LINE" in it.

Alias /zm "/usr/share/zoneminder/www"

<Directory "/usr/share/zoneminder/www">
    Options Indexes MultiViews FollowSymLinks
    AllowOverride All
    Require all granted
# Require all denied # UNCOMMENT THIS LINE
</Directory>

ScriptAlias /zmcgi/ "/usr/share/zoneminder/cgi/"

<Directory "/usr/share/zoneminder/cgi">
    AllowOverride All
    Options ExecCGI
    Require all granted
</Directory>