Update default.conf.sample to deny dotfile access#76
Conversation
Signed-off-by: Eric Nemchik <eric@nemchik.com>
There was a problem hiding this comment.
Pull request overview
This PR updates the sample nginx vhost for the container to block dotfile access by default while carving out an exception for /.well-known, which is typically needed for ACME and similar public metadata endpoints.
Changes:
- Added a
/.well-knownlocation intended to remain publicly accessible. - Added a regex location that returns 404 for dotfile requests.
- Reformatted the inline PHP file-existence check without changing its behavior.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| index index.html index.htm index.php; | ||
|
|
||
| # Allow access to the ".well-known" directory | ||
| location ^~ /.well-known { |
| location ^~ /.well-known { | ||
| allow all; | ||
| } | ||
|
|
|
I am a bot, here are the test results for this PR:
|
|
I am a bot, here are the test results for this PR for commit 77a286d :
|
No description provided.