DavLockDB "/var/lib/dav/DavLock"

<VirtualHost *:80>
    DocumentRoot "/data/uploads"

    # Autoindex icons (explicit, no auth)
    Alias /icons/ "/usr/share/apache2/icons/"
    <Directory "/usr/share/apache2/icons">
        Options FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>

    <Directory "/data/uploads">
        DAV On
        AllowOverride None
        Options Indexes
        AuthType Basic
        AuthName "WebDAV"
        AuthBasicProvider file
        AuthUserFile /webdav-config/htpasswd
        Require valid-user
    </Directory>

    LimitXMLRequestBody 0

    # Per-customer ACLs (regenerated by the app container)
    Include /webdav-config/access.conf

    ErrorLog /dev/stderr
    CustomLog /dev/stdout combined
</VirtualHost>