nginx-configs/nginx/nginx/snippets/deny-dotfiles.conf at f40690b5745fc6267d7443d06ba52856b6dfb4cb - nginx-configs - NHCarrigan

nhcarrigan/nginx-configs

generated from nhcarrigan/template

Files

T

hikari fc252e28e2

Test nginx configuration / Static Analysis (push) Failing after 4s

Details

Test nginx configuration / nginx Syntax Check (push) Successful in 20s

Details

Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m8s

Details

feat: block dotfile requests across all sites

Adds a deny-dotfiles snippet that returns 403 for any URI matching /\.
(e.g. .gitconfig, .env, .git/) and includes it in every server block.

2026-03-18 11:31:02 -07:00

5 lines

95 B

Plaintext

Raw Blame History

 # Block requests for dotfiles (e.g. .gitconfig, .env, .git/).
 location ~ /\. {
   return 403;
 }