deny all is enough

This commit is contained in:
slawkens 2024-06-23 09:56:12 +02:00
parent 81b6652738
commit 0ffc5f68b4

View File

@ -10,24 +10,20 @@ server {
# this is very important, be sure its in your nginx conf - it prevents access to logs etc. # this is very important, be sure its in your nginx conf - it prevents access to logs etc.
location ~ /system { location ~ /system {
deny all; deny all;
return 404;
} }
location /vendor { location /vendor {
deny all; deny all;
return 404;
} }
# block .htaccess, CHANGELOG.md, composer.json etc. # block .htaccess, CHANGELOG.md, composer.json etc.
# this is to prevent finding software versions # this is to prevent finding software versions
location ~\.(ht|md|json|dist)$ { location ~\.(ht|md|json|dist)$ {
deny all; deny all;
return 404;
} }
# block git files and folders # block git files and folders
location ~ /\.git { location ~ /\.git {
return 404;
deny all; deny all;
} }