Trying to access invalid directory

[Michael Durian]

I’m seeing errors like the following appear in my log file:

[Thu May 13 12:59:33.740795 2021] [authz_core:error] [pid 67752] [client 
71.237.74.11:57890] AH01630: client denied by server configuration: 
/ebs1/git/src, referer: https://git.boogie.com/moca/src/Handset/diff/

I think rather than trying to access /ebs1/git/src, it should be trying to 
access /ebs1/git/moca/src. I’m guessing there is a way I can correct this using 
macro substitutions, but I’m not sure what configuration value needs to be 
adjusted.

Here’s what I’m trying to do. I’m using apache authentication to restrict 
access to different git areas. Each area has its own .htpasswd. Basically, if 
you are trying to access /moca, you need to authenticate. The same 
LocationMatch block that handles the authentication defines REPO_NAME and 
SCANPATH environment variables that I then use in the cgitrc file. What should 
I adjust to keep cgit from trying to access the wrong filesystem path? Or am I 
thinking about this all wrong and should take a different approach completely?

Excerpts from my VirtualHost definition:
        DocumentRoot /ebs1/git

        <LocationMatch ^/moca>
                AuthType Basic
                AuthName 'Git Access'
                AuthUserFile /ebs1/git/moca/.htpasswd
                Require valid-user
                Order allow,deny
                Allow from all

                # Let cgit know where to search for repositories.
                # This value is passed to cgitrc where it is used
                # to for the scan-path variable.
                SetEnv REPO_NAME moca
                SetEnv SCANPATH /ebs1/git/moca
        </LocationMatch>

        SetEnv GIT_PROJECT_ROOT /ebs1/git
        SetEnv GIT_HTTP_EXPORT_ALL
        ScriptAliasMatch \
                "(?x)^/(.*/(HEAD | \
                           info/refs | \
                           objects/info/[^/]+ | \
                           git-(upload|receive)-pack))$" \
                /usr/local/libexec/git-core/git-http-backend/$1

        # For cgit
        SetEnv CGIT_CONFIG /ebs1/git/cgit/cgitrc
        <Directory /ebs1/git/cgit>
                AllowOverride None
                Options +ExecCGI
                Require all granted
        </Directory>
        Alias /cgit.png /ebs1/git/cgit/cgit.png
        Alias /cgit.css /ebs1/git/cgit/cgit.css
        Alias /favicon.ico /ebs1/git/cgit/favicon.ico
        ScriptAlias /moca /ebs1/git/cgit/cgit.cgi

And here’s my /ebs1/git/cgit/cgitrc
        enable-http-clone=1 
        enable-commit-graph=1
        enable-log-filecount=1
        enable-log-linecount=1
        remove-suffix=1
        enable-git-config=1
        clone-url=https://git.boogie.com/$REPO_NAME/$CGIT_REPO_URL
        scan-path=$SCANPATH

Thanks,
mike