ISTI-ansible-roles
/
ansible-role-nginx
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

do not block the .well-known urls, for real

This commit is contained in:
Andrea Dell'Amico 2020-10-20 14:52:36 +02:00
parent f8cd042975
commit 7e53ab855b
1 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
templates/nginx-virthost.j2
View File

@ -56,14 +56,6 @@ server {
log_not_found off; log_not_found off;
access_log off; access_log off;
} }
{% if nginx_block_dotfiles %}
location ~ /\.(?!well-known).* {
deny all;
access_log off;
log_not_found off;
return 404;
}
{% endif %}
{% if haproxy_ips is defined %} {% if haproxy_ips is defined %}
# We are behind haproxy # We are behind haproxy
{% for ip in haproxy_ips %} {% for ip in haproxy_ips %}
@ -218,7 +210,7 @@ server {
access_log off; access_log off;
} }
{% if nginx_block_dotfiles %} {% if nginx_block_dotfiles %}
location ~ /\. { location ~ /\.(?!well-known).* {
deny all; deny all;
access_log off; access_log off;
log_not_found off; log_not_found off;