From feb3a07edceaec75f30c1a7b032a36d84495b1e2 Mon Sep 17 00:00:00 2001 From: Andrew Stowell Date: Fri, 11 Aug 2023 17:33:21 +0000 Subject: [PATCH] example nginx configs updated to 404 all git folder access. --- example-nginx-config/example-default-nginx.conf | 5 +++++ example-nginx-config/example-nginx.conf | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/example-nginx-config/example-default-nginx.conf b/example-nginx-config/example-default-nginx.conf index 37c15f3..11b35ec 100644 --- a/example-nginx-config/example-default-nginx.conf +++ b/example-nginx-config/example-default-nginx.conf @@ -17,6 +17,11 @@ server { server_tokens off; # prevent nginx server detection + # restrict access to git folder + location ~ /\.git { + return 404; + } + # optional, enforce primary domain #if ($host != $server_name) { # return 301 $scheme://$server_name$request_uri; diff --git a/example-nginx-config/example-nginx.conf b/example-nginx-config/example-nginx.conf index 70313f6..8961718 100644 --- a/example-nginx-config/example-nginx.conf +++ b/example-nginx-config/example-nginx.conf @@ -17,6 +17,11 @@ server { server_tokens off; # prevent nginx server detection + # restrict access to git folder + location ~ /\.git { + return 404; + } + # optional, enforce primary domain #if ($host != $server_name) { # return 301 $scheme://$server_name$request_uri;