diff options
| author | Celly <celly@ted.com> | 2017-09-22 00:47:37 +0300 |
|---|---|---|
| committer | Celly <celly@ted.com> | 2017-09-22 00:47:37 +0300 |
| commit | e3e3b4da58d4b08f98d4e638864d12a6321a1ad0 (patch) | |
| tree | 7fd29fd207b09dd1c4d139fcab5863c0a479ee10 /advanced/lighttpd.conf.debian | |
| parent | a0bd517380d6e52205387c670ae14e2db54e41f1 (diff) | |
Add in some exclusions form some leaky files in the admin
Diffstat (limited to 'advanced/lighttpd.conf.debian')
| -rw-r--r-- | advanced/lighttpd.conf.debian | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/advanced/lighttpd.conf.debian b/advanced/lighttpd.conf.debian index 47f6af02..10085dd8 100644 --- a/advanced/lighttpd.conf.debian +++ b/advanced/lighttpd.conf.debian @@ -41,7 +41,7 @@ accesslog.format = "%{%s}t|%V|%r|%s|%b" index-file.names = ( "index.php", "index.html", "index.lighttpd.html" ) -url.access-deny = ( "~", ".inc" ) +url.access-deny = ( "~", ".inc", ".md", ".yml", ".ini" ) static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" ) compress.cache-dir = "/var/cache/lighttpd/compress/" @@ -66,5 +66,10 @@ $HTTP["url"] =~ "^/admin/" { } } +# Block the github files from being accessible. +$HTTP["url"] =~ "^/admin/(.git|.gitignore|.github)" { + url.access-deny = ("") +} + # Add user chosen options held in external file include_shell "cat external.conf 2>/dev/null" |