Update default.conf.sample to deny dotfile access#87
Conversation
Signed-off-by: Eric Nemchik <eric@nemchik.com>
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR:
|
Signed-off-by: Eric Nemchik <eric@nemchik.com>
There was a problem hiding this comment.
Pull request overview
Updates the container’s default nginx site configuration to reduce accidental exposure of hidden files (dotfiles), while updating the generated README changelog variables.
Changes:
- Add an nginx location block to exempt
/.well-knownand deny access to all other dotfiles. - Add QUIC
listendirectives for port 443 in the sample nginx config. - Add a release-note entry in
readme-vars.ymldescribing the dotfile access change.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
root/defaults/nginx/site-confs/default.conf.sample |
Adds /.well-known allowlist and a global dotfile deny rule; also introduces QUIC listeners and reformats an if block. |
readme-vars.yml |
Adds a changelog entry instructing existing users to update nginx config for dotfile protection. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| listen 443 quic reuseport default_server; | ||
| listen [::]:443 quic reuseport default_server; |
| listen 443 quic reuseport default_server; | ||
| listen [::]:443 quic reuseport default_server; |
| index doku.php; | ||
|
|
||
| # Allow access to the ".well-known" directory | ||
| location ^~ /.well-known { |
|
I am a bot, here are the test results for this PR:
|
No description provided.