diff options
author | Celly <celly@ted.com> | 2017-09-22 00:47:37 +0300 |
---|---|---|
committer | Celly <celly@ted.com> | 2017-09-22 00:47:37 +0300 |
commit | e3e3b4da58d4b08f98d4e638864d12a6321a1ad0 (patch) | |
tree | 7fd29fd207b09dd1c4d139fcab5863c0a479ee10 /advanced/lighttpd.conf.fedora | |
parent | a0bd517380d6e52205387c670ae14e2db54e41f1 (diff) |
Add in some exclusions form some leaky files in the admin
Diffstat (limited to 'advanced/lighttpd.conf.fedora')
-rw-r--r-- | advanced/lighttpd.conf.fedora | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/advanced/lighttpd.conf.fedora b/advanced/lighttpd.conf.fedora index 773f0142..27a854af 100644 --- a/advanced/lighttpd.conf.fedora +++ b/advanced/lighttpd.conf.fedora @@ -42,7 +42,7 @@ accesslog.format = "%{%s}t|%V|%r|%s|%b" index-file.names = ( "index.php", "index.html", "index.lighttpd.html" ) -url.access-deny = ( "~", ".inc" ) +url.access-deny = ( "~", ".inc", ".md", ".yml", ".ini" ) static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" ) compress.cache-dir = "/var/cache/lighttpd/compress/" @@ -85,5 +85,10 @@ $HTTP["url"] =~ "^/admin/" { } } +# Block the github files from being accessible. +$HTTP["url"] =~ "^/admin/(.git|.gitignore|.github)" { + url.access-deny = ("") +} + # Add user chosen options held in external file include_shell "cat external.conf 2>/dev/null" |