# {{ ansible_managed }}

ProxyErrorOverride off
RequestHeader unset Authorization

{% if docker_grav_rp_custom_csp is defined %}
Header set Content-Security-Policy "{{ docker_grav_rp_custom_csp }}"
{% endif %}

<Location /admin>
  Use LDAPUserAccessPolicy
  Require ldap-user {{ docker_grav_ldap_admin_users | join(' ') }}
</Location>