onak and Apache 2 on Debian
===========================

The package installs a ready virtual host as

	/etc/apache2/sites-available/onak-keyserver.conf

so there is nothing to write. Turn it on with:

	a2enmod cgi
	echo 'Listen 11371' >> /etc/apache2/ports.conf
	a2ensite onak-keyserver
	apache2ctl configtest && systemctl reload apache2

Two things that bite:

 * suexec must NOT be enabled — it refuses to run the programs installed in
   /usr/lib/cgi-bin/pks. Remove mods-enabled/suexec.load if it is there.

 * The CGI endpoints are aliased one by one rather than the whole /pks/
   prefix, so that the pages served under /pks/ reach the document root
   instead of being looked for among the programs. Keep it that way when
   adapting the file.

 * hashquery — SKS-style reconciliation between key servers — is installed
   but its alias is commented out: this server peers with nobody. Uncomment
   it in the virtual host the day it does.

What ends up where:

	/                    /var/www/onak/index.html      landing page
	/pks/                /var/www/onak/pks/index.html  search and publish
	/pks/lookup          CGI                            HKP, and the web index
	/pks/add             CGI                            HKP submission
	/pks/gpgwww          CGI                            path finder (experimental)
	/pks/hashquery       CGI (alias off)                SKS-style reconciliation
	/pgp2vcard.html      /var/www/onak/                 certificate → contact card
	/eid/                /var/www/onak/eid/             identifier generators

For TLS, copy the ScriptAlias and Directory blocks into your own SSL virtual
host; that is the whole of what onak needs.
