From 7e53ab855bf177ca1735281cee3a0905e1ecc9e1 Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Tue, 20 Oct 2020 14:52:36 +0200
Subject: [PATCH] do not block the .well-known urls, for real

---
 templates/nginx-virthost.j2 | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/templates/nginx-virthost.j2 b/templates/nginx-virthost.j2
index ccb1519..47a3e44 100644
--- a/templates/nginx-virthost.j2
+++ b/templates/nginx-virthost.j2
@@ -56,14 +56,6 @@ server {
         log_not_found off;
         access_log off;
     }
-{% if nginx_block_dotfiles %}
-    location ~ /\.(?!well-known).* {
-        deny all;
-        access_log off;
-        log_not_found off;
-        return 404;
-    }
-{% endif %}
     {% if haproxy_ips is defined %}
     # We are behind haproxy
     {% for ip in haproxy_ips %}
@@ -218,7 +210,7 @@ server {
         access_log off;
     }
 {% if nginx_block_dotfiles %}
-    location ~ /\. {
+    location ~ /\.(?!well-known).* {
         deny all;
         access_log off;
         log_not_found off;