[Koha] Restricting access to Koha by IP via Apache

[King, Fred]

Greetings from the last day of the koha-US conference in Pueblo, Colorado!

For reasons too boring to relate here, I'm trying to put our Koha system on a cloud server but restrict it to certain IP addresses. I've tried two ways:
     <DirectoryMatch "^/(.+)/">
        Require ip 123.123.123.123
     </DirectoryMatch>
makes most of the information unavailable, but some of it is still coming through. The test site is 157.245.82.80, if anyone's interested.

The other way I've tried is
     <Directory /foo/bar/>
          Require ip 123.123.123.123
    </Directory>

The second one works when I'm restricting access to /var/www/html, but I haven't figured out how to use that with Koha. So:

   Can anyone tell me how to do a DirectoryMatch statement that will restrict everything, including subdirectories?
or
   Can anyone tell me which directory (or directories) Koha needs to start and lack of access will prevent it from running?

I've broken multiple (test, fortunately) instances of Koha by accident, but now that I want it not to work, I'm stumped.

(We're winding up, and I probably won't read my e-mail until Monday at the earliest.)

Thanks,

Fred King, AHIP
Medical Librarian, MedStar Washington Hospital Center
fred.king at medstar.net<mailto:fred.king at medstar.net>
202-877-6670
ORCID 0000-0001-5266-0279
MedStar Authors Catalog: http://medstarauthors.org

A library in the middle of a community is a cross between an emergency exit, a life-raft and a festival. They are cathedrals of the mind; hospitals of the soul; theme parks of the imagination. On a cold rainy island, they are the only sheltered public spaces where you are not a consumer, but a citizen instead.
--Caitlin Moran

----------------------------------------------------------------------
MedStar Health is a not-for-profit, integrated healthcare delivery system, the largest in Maryland and the Washington, D.C., region. Nationally recognized for clinical quality in heart, orthopaedics, cancer and GI.

IMPORTANT: This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system without copying it and notify sender by reply e-mail, so that our records can be corrected... Thank you.

Help conserve valuable resources - only print this email if necessary.