<commit_before>---
classes:
  - apache
  - apache::mod::authnz_ldap
  - apache::mod::dav_svn
  - apache::mod::rewrite
  - apache::mod::ssl
  - collectd
  - collectd::plugin::cpu
  - collectd::plugin::load
  - collectd::plugin::memory
  - collectd::plugin::interface
  - collectd::plugin::write_http
  - fail2ban_asf::config
  - httpd_modules
  - httpd_modules::mod_svn_check_path
  - puppet_asf
  - rootbin_asf
  - ssl::name::wildcard_apache_org
  - svnpubsub
  - subversion_server
  - vhosts_asf::modules
  - vhosts_asf::vhosts
  - zfs_on_ubuntu
  - perl
  
apache::keepalive:          'On'
apache::keepalive_timeout:  '30'
apache::default_vhost:      false
apache::docroot:            '/x1/www/htdocs'

apache::mod::event::listenbacklog: '511'
apache::mod::event::maxclients: '250'
apache::mod::event::maxconnectionsperchild: '200000'
apache::mod::event::maxrequestworkers: '500'
apache::mod::event::maxsparethreads: '150'
apache::mod::event::minsparethreads: '150'
apache::mod::event::serverlimit: '10'
apache::mod::event::startservers: '5'
apache::mod::event::threadlimit: '250'
apache::mod::event::threadsperchild: '50'

apache::mpm_module:         'event'
apache::serveradmin:        '<EMAIL>'

collectd::purge:  true
collectd::recurse: true
collectd::purge_config: true

collectd::plugin::interface::interfaces: 
  - lo
collectd::plugin::interface::ignoreselected: true

fail2ban_asf::config::jails:
  httpd-svn:
    filter: asf-httpd
    action:
      - asf-ban-httpd
      - asf-sendmail[name="HTTPD (Authentication)", hostname="hades", dest=<EMAIL>, sender=<EMAIL>, logpath="/var/log/vc/error_log"]
    logpath: /var/log/vc/error_log
    findtime: 1800
    maxretry: 100

fail2ban_asf::config::filters:
  asf-httpd:
    filterfailregex: |
      [[]client <HOST>[]] user .* authentication failure
      [[]client <HOST>[]] user .* not found
      [[]client <HOST>[]] user .* password mismatch

httpd_modules::dev_package:
  - apache2-dev
httpd_modules::mod_svn_check_path::required_packages:
  - libsvn-dev
  - libapreq2-dev
httpd_modules::mod_svn_check_path::command: 'apxs2 -I /usr/include/subversion-1 -i -a -c mod_svn_check_path.c'

vhosts_asf::modules::modules:
  authz_svn:
    name: 'authz_svn'
  svn_check_path:
    name: 'svn_check_path'

vhosts_asf::vhosts::vhosts:
  svn:
    vhost_name: '*'
    port: 80
    docroot: '/var/www'
    servername: 'svn.apache.org'
    serveraliases:
      - svn-master.apache.org
      - svn.*.apache.org
      - hades.apache.org
      - hades.*.apache.org
    custom_fragment: |
      # The main repository
      RewriteEngine On

      # tlp migrations

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/incubator/(.+)
      RewriteCond /repos/asf/%1?ckpath -U
      RewriteRule .* /repos/asf/%1 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/incubator/(.+)
      RewriteCond /repos/asf/%2?ckpath -U
      RewriteRule .* /repos/asf/%2 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf?ckpath=/repos/asf/incubator -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]

      # openejb -> tomee

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/openejb/(.+)
      RewriteCond /repos/asf/tomee/%1?ckpath -U
      RewriteRule .* /repos/asf/tomee/%1 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/openejb/(.+)
      RewriteCond /repos/asf/tomee/%2?ckpath -U
      RewriteRule .* /repos/asf/tomee/%2 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf/tomee?ckpath=/repos/asf/openejb -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]

      <Location /repos/asf>
        DAV svn
        SVNPath /x1/svn/repos/asf
        SVNCheckPathPrefix  /repos/asf
        SetOutputFilter DEFLATE
        AuthzSVNAccessFile /x1/svn/asf-authorization
            
        LimitRequestBody 100000000
        <LimitExcept GET POST OPTIONS PROPFIND REPORT>
          Order allow,deny
          Deny from all
        </LimitExcept>
      </Location>
  
      
  svn_https:
    vhost_name: '*'
    port: 443
    ssl_cert:  '/etc/ssl/certs/wildcard.apache.org.crt'
    ssl_chain: '/etc/ssl/certs/wildcard.apache.org.chain'
    ssl_key:  '/etc/ssl/private/wildcard.apache.org.key'
    ssl: true
    docroot: '/var/www'
    servername: 'svn.apache.org'
    serveraliases:
      - svn-master.apache.org
      - svn.*.apache.org
      - hades.apache.org
      - hades.*.apache.org
    custom_fragment: |
      # The main repository
      RewriteEngine On
      
      # tlp migrations
      
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/incubator/(.+)
      RewriteCond /repos/asf/%1?ckpath -U
      RewriteRule .* /repos/asf/%1 [L,R=301]
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/incubator/(.+)
      RewriteCond /repos/asf/%2?ckpath -U
      RewriteRule .* /repos/asf/%2 [L,R=301]
      
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf?ckpath=/repos/asf/incubator -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]
        
      # openejb -> tomee
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/openejb/(.+)
      RewriteCond /repos/asf/tomee/%1?ckpath -U
      RewriteRule .* /repos/asf/tomee/%1 [L,R=301]
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/openejb/(.+)
      RewriteCond /repos/asf/tomee/%2?ckpath -U
      RewriteRule .* /repos/asf/tomee/%2 [L,R=301]
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf/tomee?ckpath=/repos/asf/openejb -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]
        
      <Location /repos/asf>
        DAV svn
        SVNPath /x1/svn/repos/asf
        SVNCheckPathPrefix  /repos/asf
        SetOutputFilter DEFLATE
          
        AuthName "<NAME>"
        AuthType Basic
        AuthBasicProvider ldap file
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        #Fall back to to using the local htpasswd file if LDAP fails.
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/asf-authorization
          
        Require valid-user
        Satisfy any
          
      </Location>
        
      # Needed for sync
      <Location /repos/asf-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/asf
        Order deny,allow
        Allow from 140.211.11.4
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # Needed for sync
      <Location /repos/private-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/private
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # Needed for sync
      <Location /repos/tck-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/tck
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # This repository is private to the Foundation
      <Location /repos/private>
        DAV svn
        SVNPath /x1/svn/repos/private
        
        SetOutputFilter DEFLATE
        
        AuthName "ASF Members"
        AuthType Basic
        AuthBasicProvider ldap file
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
         
        #Fall back to to using the local htpasswd file if LDAP fails.
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/pit-authorization
          
        Require valid-user
        Satisfy any
          
      </Location>
        
      # This repository is private to the Geronimo group for the J2EE TCK
      <Location /repos/tck>
        DAV svn
        SVNPath /x1/svn/repos/tck
        
        SetOutputFilter DEFLATE
          
        AuthName "ASF TCK Users"
        AuthType Basic
        AuthBasicProvider ldap file
         
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/pit-authorization
          
        Require valid-user
      </Location>
        
      # infra repo
      <Location /repos/infra>
        DAV svn
        SVNPath /x1/svn/repos/infra
        
        SetOutputFilter DEFLATE
          
        AuthName "ASF Committers"
        AuthType Basic
        AuthBasicProvider ldap file
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        #Fall back to to using the local htpasswd file if LDAP fails.
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/pit-authorization
          
        Require valid-user
        Satisfy any
          
        # Always require authentication on non-read access 
        #    <LimitExcept GET OPTIONS PROPFIND REPORT>
        #      Require valid-user
        #    </LimitExcept>
      </Location>
          
        # Needed for sync
      <Location /repos/infra-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/infra
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # Test repository for committers
      <Location /repos/test>
        DAV svn
        SVNPath /x1/svn/test
          
        SetOutputFilter DEFLATE
          
        AuthName "ASF Committers"
        AuthType Basic
        AuthBasicProvider ldap
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        # Always require authentication on non-read access 
        <LimitExcept GET OPTIONS PROPFIND REPORT>
          require valid-user
        </LimitExcept>
      </Location>
        
      # These are the infrastructure web forms which are committers-only
      <Location /dev/forms>
        Order allow,deny
        Allow from all
          
        AuthName "ASF SVN Committers"
        AuthType Basic
        #AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require valid-user
      </Location>
        
      <Location /dyn/asf-mailer.cgi>
        Order allow,deny
        Allow from all
          
        AuthName "ASF SVN Committers"
        AuthType Basic
        #AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require valid-user
      </Location>
        

<commit_msg>fail2ban log path and testing<commit_after>---
classes:
  - apache
  - apache::mod::authnz_ldap
  - apache::mod::dav_svn
  - apache::mod::rewrite
  - apache::mod::ssl
  - collectd
  - collectd::plugin::cpu
  - collectd::plugin::load
  - collectd::plugin::memory
  - collectd::plugin::interface
  - collectd::plugin::write_http
  - fail2ban_asf::config
  - httpd_modules
  - httpd_modules::mod_svn_check_path
  - puppet_asf
  - rootbin_asf
  - ssl::name::wildcard_apache_org
  - svnpubsub
  - subversion_server
  - vhosts_asf::modules
  - vhosts_asf::vhosts
  - zfs_on_ubuntu
  - perl
  
apache::keepalive:          'On'
apache::keepalive_timeout:  '30'
apache::default_vhost:      false
apache::docroot:            '/x1/www/htdocs'

apache::mod::event::listenbacklog: '511'
apache::mod::event::maxclients: '250'
apache::mod::event::maxconnectionsperchild: '200000'
apache::mod::event::maxrequestworkers: '500'
apache::mod::event::maxsparethreads: '150'
apache::mod::event::minsparethreads: '150'
apache::mod::event::serverlimit: '10'
apache::mod::event::startservers: '5'
apache::mod::event::threadlimit: '250'
apache::mod::event::threadsperchild: '50'

apache::mpm_module:         'event'
apache::serveradmin:        '<EMAIL>'

collectd::purge:  true
collectd::recurse: true
collectd::purge_config: true

collectd::plugin::interface::interfaces: 
  - lo
collectd::plugin::interface::ignoreselected: true

fail2ban_asf::config::jails:
  httpd-svn:
    filter: asf-httpd
    action:
      - asf-ban-httpd
      - asf-sendmail[name="HTTPD (Authentication)", hostname="hades", dest=<EMAIL>, sender=<EMAIL>, logpath="/var/log/vc/error_log"]
    logpath: /var/log/apache2/svn_https_error_ssl.log
    findtime: 1800
    maxretry: 5

fail2ban_asf::config::filters:
  asf-httpd:
    filterfailregex: |
      [[]client <HOST>[]] user .* authentication failure
      [[]client <HOST>[]] user .* not found
      [[]client <HOST>[]] user .* password mismatch

httpd_modules::dev_package:
  - apache2-dev
httpd_modules::mod_svn_check_path::required_packages:
  - libsvn-dev
  - libapreq2-dev
httpd_modules::mod_svn_check_path::command: 'apxs2 -I /usr/include/subversion-1 -i -a -c mod_svn_check_path.c'

vhosts_asf::modules::modules:
  authz_svn:
    name: 'authz_svn'
  svn_check_path:
    name: 'svn_check_path'

vhosts_asf::vhosts::vhosts:
  svn:
    vhost_name: '*'
    port: 80
    docroot: '/var/www'
    servername: 'svn.apache.org'
    serveraliases:
      - svn-master.apache.org
      - svn.*.apache.org
      - hades.apache.org
      - hades.*.apache.org
    custom_fragment: |
      # The main repository
      RewriteEngine On

      # tlp migrations

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/incubator/(.+)
      RewriteCond /repos/asf/%1?ckpath -U
      RewriteRule .* /repos/asf/%1 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/incubator/(.+)
      RewriteCond /repos/asf/%2?ckpath -U
      RewriteRule .* /repos/asf/%2 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf?ckpath=/repos/asf/incubator -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]

      # openejb -> tomee

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/openejb/(.+)
      RewriteCond /repos/asf/tomee/%1?ckpath -U
      RewriteRule .* /repos/asf/tomee/%1 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/openejb/(.+)
      RewriteCond /repos/asf/tomee/%2?ckpath -U
      RewriteRule .* /repos/asf/tomee/%2 [L,R=301]

      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf/tomee?ckpath=/repos/asf/openejb -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]

      <Location /repos/asf>
        DAV svn
        SVNPath /x1/svn/repos/asf
        SVNCheckPathPrefix  /repos/asf
        SetOutputFilter DEFLATE
        AuthzSVNAccessFile /x1/svn/asf-authorization
            
        LimitRequestBody 100000000
        <LimitExcept GET POST OPTIONS PROPFIND REPORT>
          Order allow,deny
          Deny from all
        </LimitExcept>
      </Location>
  
      
  svn_https:
    vhost_name: '*'
    port: 443
    ssl_cert:  '/etc/ssl/certs/wildcard.apache.org.crt'
    ssl_chain: '/etc/ssl/certs/wildcard.apache.org.chain'
    ssl_key:  '/etc/ssl/private/wildcard.apache.org.key'
    ssl: true
    docroot: '/var/www'
    servername: 'svn.apache.org'
    serveraliases:
      - svn-master.apache.org
      - svn.*.apache.org
      - hades.apache.org
      - hades.*.apache.org
    custom_fragment: |
      # The main repository
      RewriteEngine On
      
      # tlp migrations
      
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/incubator/(.+)
      RewriteCond /repos/asf/%1?ckpath -U
      RewriteRule .* /repos/asf/%1 [L,R=301]
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/incubator/(.+)
      RewriteCond /repos/asf/%2?ckpath -U
      RewriteRule .* /repos/asf/%2 [L,R=301]
      
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf?ckpath=/repos/asf/incubator -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]
        
      # openejb -> tomee
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =GET [OR]
      RewriteCond %%{}{REQUEST_METHOD} =HEAD
      RewriteCond %%{}{REQUEST_URI} /repos/asf/openejb/(.+)
      RewriteCond /repos/asf/tomee/%1?ckpath -U
      RewriteRule .* /repos/asf/tomee/%1 [L,R=301]
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =PROPFIND
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(?:bc|rvr)/(\d+)/openejb/(.+)
      RewriteCond /repos/asf/tomee/%2?ckpath -U
      RewriteRule .* /repos/asf/tomee/%2 [L,R=301]
        
      RewriteCond %%{}{IS_SUBREQ} =false
      RewriteCond %%{}{REQUEST_METHOD} =REPORT
      RewriteCond %%{}{REQUEST_URI} /repos/asf/!svn/(vcc/default|me)
      RewriteCond /repos/asf/tomee?ckpath=/repos/asf/openejb -U
      RewriteRule .* %%{}{PATH_INFO} [L,R=301]
        
      <Location /repos/asf>
        DAV svn
        SVNPath /x1/svn/repos/asf
        SVNCheckPathPrefix  /repos/asf
        SetOutputFilter DEFLATE
          
        AuthName "<NAME>"
        AuthType Basic
        AuthBasicProvider ldap file
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        #Fall back to to using the local htpasswd file if LDAP fails.
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/asf-authorization
          
        Require valid-user
        Satisfy any
          
      </Location>
        
      # Needed for sync
      <Location /repos/asf-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/asf
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # Needed for sync
      <Location /repos/private-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/private
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # Needed for sync
      <Location /repos/tck-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/tck
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # This repository is private to the Foundation
      <Location /repos/private>
        DAV svn
        SVNPath /x1/svn/repos/private
        
        SetOutputFilter DEFLATE
        
        AuthName "ASF Members"
        AuthType Basic
        AuthBasicProvider ldap file
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
         
        #Fall back to to using the local htpasswd file if LDAP fails.
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/pit-authorization
          
        Require valid-user
        Satisfy any
          
      </Location>
        
      # This repository is private to the Geronimo group for the J2EE TCK
      <Location /repos/tck>
        DAV svn
        SVNPath /x1/svn/repos/tck
        
        SetOutputFilter DEFLATE
          
        AuthName "ASF TCK Users"
        AuthType Basic
        AuthBasicProvider ldap file
         
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/pit-authorization
          
        Require valid-user
      </Location>
        
      # infra repo
      <Location /repos/infra>
        DAV svn
        SVNPath /x1/svn/repos/infra
        
        SetOutputFilter DEFLATE
          
        AuthName "<NAME>"
        AuthType Basic
        AuthBasicProvider ldap file
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        #Fall back to to using the local htpasswd file if LDAP fails.
        AuthUserFile /x1/svn/asf-committers
          
        ### use a different authorization file?
        AuthzSVNAccessFile /x1/svn/pit-authorization
          
        Require valid-user
        Satisfy any
          
        # Always require authentication on non-read access 
        #    <LimitExcept GET OPTIONS PROPFIND REPORT>
        #      Require valid-user
        #    </LimitExcept>
      </Location>
          
        # Needed for sync
      <Location /repos/infra-proxy-sync>
        DAV svn
        SVNPath /x1/svn/repos/infra
        Order deny,allow
        Allow from 172.16.58.3
        Deny from all
          
        AuthName "ASF sync"
        AuthType Basic
        AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require user asf-sync-process
      </Location>
        
      # Test repository for committers
      <Location /repos/test>
        DAV svn
        SVNPath /x1/svn/test
          
        SetOutputFilter DEFLATE
          
        AuthName "ASF Committers"
        AuthType Basic
        AuthBasicProvider ldap
          
        AuthLDAPurl "ldaps://ldap2-us.apache.org:636 ldap1-us.apache.org ldap1-eu.apache.org/ou=people,dc=apache,dc=org?uid"
        AuthLDAPRemoteUserAttribute uid
        #AuthzLDAPAuthoritative off
          
        # Always require authentication on non-read access 
        <LimitExcept GET OPTIONS PROPFIND REPORT>
          require valid-user
        </LimitExcept>
      </Location>
        
      # These are the infrastructure web forms which are committers-only
      <Location /dev/forms>
        Order allow,deny
        Allow from all
          
        AuthName "ASF SVN Committers"
        AuthType Basic
        #AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require valid-user
      </Location>
        
      <Location /dyn/asf-mailer.cgi>
        Order allow,deny
        Allow from all
          
        AuthName "ASF SVN Committers"
        AuthType Basic
        #AuthBasicProvider file
        AuthUserFile /x1/svn/asf-committers
        Require valid-user
      </Location>
        


{'fraction_non_alphanumeric': 0.1174797056369016, 'fraction_numerical': 0.015211288976557165, 'mean_word_length': 2.188172693191438, 'pattern_counts': {'":': 0, '<': 78, '<?xml version=': 0, '>': 82, 'https://': 0, 'lorem ipsum': 0, 'www.': 6, 'xml': 0}, 'pii_count': 8, 'substrings_counts': 2, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4989170', 'n_tokens_mistral': 9587, 'n_tokens_neox': 8770, 'n_words': 1673}