Use apache to access buildbot

1\ Use apache to access buildbot

   a)Install apache
   b)Add 'LoadModule  proxy_module         /usr/lib/apache2/modules/mod_proxy.so' to file '/etc/apache2/mods-enabled/proxy.load'
     Add 'LoadModule  proxy_http_module    /usr/lib/apache2/modules/mod_proxy_http.so' to file '/etc/apache2/mods-enabled/proxy_http.load'

   c)Add following contents to file '/etc/apache2/sites-available/default' :

<Location "/buildbot/">
         Order allow,deny
         allow from all
</Location>
ProxyPreserveHost On
ProxyRequests off
ProxyPass /buildbot/ http://localhost:9010/
ProxyPassReverse /buildbot http://localhost:9010/

   Then start buildbot and run 'sudo /etc/init.d/apache2  restart',you can access buildbot through apache.
 
2\ Add authorization to access buildbot through apache
   a)Use htpasswd tool to generate a file with username and password after encrypted.
   b)Modify '/usr/lib/apache2/httpd.conf' to add authorization, you can add following contents to file '/usr/lib/apache2/httpd.conf' for 'Basic' authorization which the 'AuthType' should be 'Basic'.     

<Location "/buildbot/">
   Order allow,deny
   allow from all
   AuthName "Buildbot Access"
   AuthType Basic
   AuthUserFile /etc/apache2/buildbot_auth
   Require valid-user
 </Location>

   The file '/etc/apache2/buildbot_auth' is the file that generated by htpasswd.Then run 'sudo /etc/init.d/apache2  restart',you will need authorization to access buildbot through apache.
   
   c)you can also apply digest authorization, that you should use htdigest to create and update the flat-files used to store usernames, realm and password.you can add following contents to file '/usr/lib/apache2/httpd.conf'.    

<Location "/buildbot/">
   Order allow,deny
   allow from all
   AuthName "buildbot"
   AuthType Digest
   AuthDigestProvider file
   AuthUserFile /etc/apache2/digest_users
   Require valid-user
</Location>

     The file '/etc/apache2/buildbot_digest_users' is the file that generated by htdigest.Then run 'sudo /etc/init.d/apache2  restart',you will need authorization to access buildbot through apache.
     attention: The realm create by htdigest should be same as the value of 'AuthName'.

3\ Limit port 9010
  After steps above, you still can access buildbot though port 9010.You can limit the port 9010 through tool iptables ,and then other pc can not access buildbot though it.
  The command is as follow:

sudo iptables -A INPUT -s localhost  -p tcp --dport 9010 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 9010 -j DROP