Update default.conf.sample to deny dotfile access#535
Update default.conf.sample to deny dotfile access#535
Conversation
Signed-off-by: Eric Nemchik <eric@nemchik.com>
|
This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions. |
|
I am a bot, here are the test results for this PR:
|
There was a problem hiding this comment.
Pull request overview
Updates the bundled Nginx sample site config to more broadly block access to dotfiles, and records the change in the generated README changelog source (readme-vars.yml).
Changes:
- Update
default.conf.sampleto deny requests to dotfile paths (and suppress related logging). - Add a changelog entry advising existing users to update their Nginx site config.
- Adjust the existing “Rebase to Alpine 3.22.” changelog entry date.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| root/defaults/nginx/site-confs/default.conf.sample | Expands dotfile blocking behavior in the sample Nginx server config. |
| readme-vars.yml | Adds a changelog entry describing the dotfile access change (and modifies an older changelog date). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| # deny access to all dotfiles | ||
| location ~ /\. { | ||
| deny all; | ||
| log_not_found off; | ||
| access_log off; | ||
| return 404; |
| location ~ /\.ht { | ||
| # deny access to all dotfiles | ||
| location ~ /\. { | ||
| deny all; |
| changelogs: | ||
| - {date: "14.10.25:", desc: "Rebase to Alpine 3.22."} | ||
| - {date: "08.02.26:", desc: "Existing users should update: site-confs/default.conf - Deny access to all dotfiles."} | ||
| - {date: "10.07.25:", desc: "Rebase to Alpine 3.22."} |
|
I am a bot, here are the test results for this PR:
|
Signed-off-by: Eric Nemchik <eric@nemchik.com>
|
I am a bot, here are the test results for this PR:
|
No description provided.