Allow vetoing of suexec

[hcoop/domtool2.git] / lib / apache.dtl

diff --git a/lib/apache.dtl b/lib/apache.dtl
index 1e5d54e..d80d7ef 100644 (file)
--- a/lib/apache.dtl
+++ b/lib/apache.dtl
@@ -8,13 +8,19 @@ extern val web_node_to_node : web_node -> node;
 context Vhost;
 {{A WWW virtual host}}
 
 context Vhost;
 {{A WWW virtual host}}
 

+extern type suexec_flag;
+extern val suexec_flag : bool -> suexec_flag;
+{{Whether or not to use Suexec with a vhost.
+[suexec_flag] fails when passed [false] by a user without the 'www' privilege.}}
+

 extern val vhost : host -> Vhost => [Domain]
        {WebNodes : [web_node],
         SSL : bool,
         User : your_user,
         Group : your_group,
         DocumentRoot : your_path,
 extern val vhost : host -> Vhost => [Domain]
        {WebNodes : [web_node],
         SSL : bool,
         User : your_user,
         Group : your_group,
         DocumentRoot : your_path,

-        ServerAdmin : email};
+        ServerAdmin : email,
+        SuExec : suexec_flag};

 {{Add a new named Apache virtual host, specifying which nodes' Apache servers
   should answer requests for this host, whether it should use SSL, what UNIX
   user and group dynamic content generators should be run as, the filesystem
 {{Add a new named Apache virtual host, specifying which nodes' Apache servers
   should answer requests for this host, whether it should use SSL, what UNIX
   user and group dynamic content generators should be run as, the filesystem