• DONE: HTTP AUTH from PAM through the magic of mod-auth-pam
  • DONE: HTTP access from /etc/group through the magic of mod-auth-sys-group
  • DONE: Shell security through a restricted shell and privilege escalation security (for mkwiki, mkuser, etc) through sudo
  • DONE: Guaranteed namespace coherence with the vhosting of cgi, secure, and normal with the aid of a wildcard SSL certificate
  • TODO: Work out how to pass mailing list emails around. Probably either ssh or vserver namespace magic.
  • DONE: manual setup file overrides, /etc/ikiwiki/piny/$reponame.setup.pl, included directly with 'do' before dumping state.
  • DONE: rebuildrepo