# DevOps Handler

This handler is designed to read vhost configuration from the website itself not from LL:NG configuration. Rules and headers are set in a rules.json file stored at the website root directory (ie `http://website/rules.json`). This file looks like:

rules.json

      {
        "rules": {
          "^/admin": "$uid eq 'admin'",
          "default": "accept'
        },
        "headers": {
          "Auth-User": "$uid"
        }
      }

If this file is not found, the default rule "accept" is applied and just "Auth-User" header is sent (Auth-User => $uid).

No specific configuration is required except that:

- you have to choose this specific handler (directly by using `VHOSTTYPE` environment variable)
- you can set the loopback URL needed by the DevOps handler to get `/rules.json` or use `RULES_URL` parameter to set JSON file path (see SSO as a Service). Default to `http://127.0.0.1:<server-port>`

Note that DevOps handler will refuse to compile rules.json if Safe Jail isn't enabled.

See SSO as a Service for more