Update default.conf.sample to deny dotfile access - #87
Conversation
Signed-off-by: Eric Nemchik <eric@nemchik.com>
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR:
|
Signed-off-by: Eric Nemchik <eric@nemchik.com>
There was a problem hiding this comment.
Pull request overview
Updates the container’s default nginx site configuration to reduce accidental exposure of hidden files (dotfiles), while updating the generated README changelog variables.
Changes:
- Add an nginx location block to exempt
/.well-knownand deny access to all other dotfiles. - Add QUIC
listendirectives for port 443 in the sample nginx config. - Add a release-note entry in
readme-vars.ymldescribing the dotfile access change.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
root/defaults/nginx/site-confs/default.conf.sample |
Adds /.well-known allowlist and a global dotfile deny rule; also introduces QUIC listeners and reformats an if block. |
readme-vars.yml |
Adds a changelog entry instructing existing users to update nginx config for dotfile protection. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| listen 443 quic reuseport default_server; | ||
| listen [::]:443 quic reuseport default_server; |
| listen 443 quic reuseport default_server; | ||
| listen [::]:443 quic reuseport default_server; |
| index doku.php; | ||
|
|
||
| # Allow access to the ".well-known" directory | ||
| location ^~ /.well-known { |
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR for commit d9f506b :
|
|
I am a bot, here are the test results for this PR for commit 7a6c4e8 :
|
|
This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions. |
No description provided.