# WITHOUT SSL

<IfModule !mod_ssl.c>

    ScriptAlias /nagios/cgi-bin /usr/lib/nagios/cgi

    <Directory /usr/lib/nagios/cgi>
        Options ExecCGI
        order deny,allow
        deny from all
        allow from 127.0.0.1
	ErrorDocument 403 "Access denied per /etc/httpd/conf/webapps.d/12_nagios.conf"
	AuthType Basic
	AuthUserFile /etc/nagios/passwd
	AuthGroupFile /etc/nagios/group
	AuthName "Nagios Access"
	Require group nagios
	Satisfy Any
    </Directory>

    Alias /nagios /usr/share/nagios

    <Directory /usr/share/nagios>
        Options None
        order deny,allow
        deny from all
        allow from 127.0.0.1
	ErrorDocument 403 "Access denied per /etc/httpd/conf/webapps.d/12_nagios.conf"
	AuthType Basic
	AuthUserFile /etc/nagios/passwd
	AuthGroupFile /etc/nagios/group
	AuthName "Nagios Access"
	Require group nagios
	Satisfy Any
    </Directory>

</IfModule>

# WITH SSL ENABLED

<IfModule mod_ssl.c>

    ScriptAlias /nagios/cgi-bin /usr/lib/nagios/cgi

    <Directory /usr/lib/nagios/cgi>
	Options ExecCGI
	SSLRequireSSL
	Order Deny,Allow
	Deny from all
	AuthType Basic
	AuthUserFile /etc/nagios/passwd
	AuthGroupFile /etc/nagios/group
	AuthName "Nagios Access"
	Require group nagios
	Satisfy Any
    </Directory>

    Alias /nagios /usr/share/nagios

    <Directory /usr/share/nagios>
	Options None
	SSLRequireSSL
	Order Deny,Allow
	Deny from all
	AuthType Basic
	AuthUserFile /etc/nagios/passwd
	AuthGroupFile /etc/nagios/group
	AuthName "Nagios Access"
	Require group nagios
	Satisfy Any
    </Directory>

# Uncomment the following lines to force a redirect to a working
# SSL aware apache server. This serves as an example.
#    <LocationMatch /nagios>
#	Options FollowSymLinks
#	RewriteEngine on
#	RewriteCond %{SERVER_PORT} !^443$
#	RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]
#    </LocationMatch>

</IfModule>