generated from nhcarrigan/template
feat: block dotfile requests across all sites
Adds a deny-dotfiles snippet that returns 403 for any URI matching /\. (e.g. .gitconfig, .env, .git/) and includes it in every server block.
This commit is contained in:
@@ -19,4 +19,5 @@ server {
|
||||
location = /index.html {
|
||||
internal;
|
||||
}
|
||||
include /etc/nginx/snippets/deny-dotfiles.conf;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user