yubikey.conf

## /etc/httpd/conf.d/yubikey.conf
<VirtualHost *:80>
    DocumentRoot /var/www/html/
    ServerName yubikey.cygnetix.io
    ErrorLog logs/yubikey.cygnetix.io-error_log
    CustomLog logs/yubikey.cygnetix.io-access_log common

    RewriteEngine on
    RewriteRule ^(.*)$ $1.php [L]

    ## Only allow localhost here
    <Location "/wsapi">
        Order deny,allow
        Deny from all
        Allow from 127.0.0.1 ::1
    </Location>

    ## Allow authorised clients and networks here
    <Location "/wsapi/2.0">
        Order deny,allow
        Deny from all
        Allow from 127.0.0.1 ::1

        ## Add networks that are allowed to authenticate here
        # Allow from 10.0.0.0/24
    </Location>
</VirtualHost>