acute/ansible-collection-wip
1
0
Fork 0
forked from irl/ansible-collection-wip
Code Pull requests Activity

Feat: mount /var/www/html to the nginx container and add config to protect against CVE-2019-11043

Browse source
This commit is contained in:
Ana Custura 2025-08-08 17:08:43 +01:00
parent 7ea092737a
commit 09cbf70e13
2 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/podman_cleaninsights/templates/nginx.conf
View file

@ -41,8 +41,8 @@ server {
location ~ ^/(index|matomo|cleaninsights|piwik|js/index|plugins/HeatmapSessionRecording/configs).php {
# regex to split $uri to $fastcgi_script_name and $fastcgi_path
try_files $fastcgi_script_name =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
# Check that the PHP script exists before passing it
#try_files $fastcgi_script_name =404;
@ -59,6 +59,10 @@ server {
return 403;
}
location / {
try_files $uri $uri/ =404;
}
# deny access to all cleaninsights.ini file
location ~ cleaninsights.ini {
return 403;