Trying to access invalid directory

[Michael Durian <durian@boogie.com>]

I’m seeing errors like the following appear in my log file:

[Thu May 13 12:59:33.740795 2021] [authz_core:error] [pid 67752] [client 71.237.74.11:57890] AH01630: client denied by server configuration: /ebs1/git/src, referer: https://git.boogie.com/moca/src/Handset/diff/

I think rather than trying to access /ebs1/git/src, it should be trying to access /ebs1/git/moca/src. I’m guessing there is a way I can correct this using macro substitutions, but I’m not sure what configuration value needs to be adjusted.

Here’s what I’m trying to do. I’m using apache authentication to restrict access to different git areas. Each area has its own .htpasswd. Basically, if you are trying to access /moca, you need to authenticate. The same LocationMatch block that handles the authentication defines REPO_NAME and SCANPATH environment variables that I then use in the cgitrc file. What should I adjust to keep cgit from trying to access the wrong filesystem path? Or am I thinking about this all wrong and should take a different approach completely?

Excerpts from my VirtualHost definition:
	DocumentRoot /ebs1/git

        <LocationMatch ^/moca>
                AuthType Basic
                AuthName 'Git Access'
                AuthUserFile /ebs1/git/moca/.htpasswd
                Require valid-user
                Order allow,deny
                Allow from all

                # Let cgit know where to search for repositories.
                # This value is passed to cgitrc where it is used
                # to for the scan-path variable.
                SetEnv REPO_NAME moca
                SetEnv SCANPATH /ebs1/git/moca
        </LocationMatch>

        SetEnv GIT_PROJECT_ROOT /ebs1/git
        SetEnv GIT_HTTP_EXPORT_ALL
        ScriptAliasMatch \
                "(?x)^/(.*/(HEAD | \
                           info/refs | \
                           objects/info/[^/]+ | \
                           git-(upload|receive)-pack))$" \
                /usr/local/libexec/git-core/git-http-backend/$1

        # For cgit
        SetEnv CGIT_CONFIG /ebs1/git/cgit/cgitrc
        <Directory /ebs1/git/cgit>
                AllowOverride None
                Options +ExecCGI
                Require all granted
        </Directory>
        Alias /cgit.png /ebs1/git/cgit/cgit.png
        Alias /cgit.css /ebs1/git/cgit/cgit.css
        Alias /favicon.ico /ebs1/git/cgit/favicon.ico
        ScriptAlias /moca /ebs1/git/cgit/cgit.cgi

And here’s my /ebs1/git/cgit/cgitrc
	enable-http-clone=1 
	enable-commit-graph=1
	enable-log-filecount=1
	enable-log-linecount=1
	remove-suffix=1
	enable-git-config=1
	clone-url=https://git.boogie.com/$REPO_NAME/$CGIT_REPO_URL
	scan-path=$SCANPATH

Thanks,
mike