Andrea Sessa 2 лет назад
Родитель
Сommit
a57d1e4072

+ 3 - 2
install/deb/templates/web/nginx/php-fpm/gitea.stpl

@@ -24,8 +24,9 @@ server {
 
 	include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;
 
-	location ~ /.well-known {
-		allow all;
+	location ~ /\.(?!well-known\/) {
+		deny all;
+		return 404;
 	}
 
 	location / {

+ 3 - 2
install/deb/templates/web/nginx/php-fpm/gitea.tpl

@@ -15,8 +15,9 @@ server {
 
 	include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;
 
-	location ~ /.well-known {
-		allow all;
+	location ~ /\.(?!well-known\/) {
+		deny all;
+		return 404;
 	}
 
 	location / {