Просмотр исходного кода

Validate dns servers for nginx.conf to prevent ipv6 addresses.

Raphael Schneeberger 6 лет назад
Родитель
Сommit
e6c69da481
1 измененных файлов с 8 добавлено и 1 удалено
  1. 8 1
      install/upgrade/1.00.0-190618.sh

+ 8 - 1
install/upgrade/1.00.0-190618.sh

@@ -118,7 +118,14 @@ if [ ! -e /etc/ssl/dhparam.pem ]; then
 
     # Update DNS servers in nginx.conf
     dns_resolver=$(cat /etc/resolv.conf | grep -i '^nameserver' | cut -d ' ' -f2 | tr '\r\n' ' ' | xargs)
-    sed -i "s/1.0.0.1 1.1.1.1/$dns_resolver/g" /etc/nginx/nginx.conf
+    for ip in $dns_resolver; do
+        if [[ $ip =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            resolver="$ip $resolver"
+        fi
+    done
+    if [ ! -z "$resolver" ]; then
+        sed -i "s/1.0.0.1 1.1.1.1/$dns_resolver/g" /etc/nginx/nginx.conf
+    fi
 
     # Restart Nginx service
     systemctl restart nginx >/dev/null 2>&1